singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

uoftctf-2025-chals-public

University of Toronto Capture the Flag Competition 2025 This repository contains the solutions to challenges during UofTCTF 2025. The source is also included in most of the challenge directories. Challenges Challenge Name| Solve Count| Category ---|---|--- Funny Cipher| 231/1510| Crypto Enchanted...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery

WordPress PhonePe Payment Solutions plugin through 1.0.15 is susceptible to server-side request forgery. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

flareon2023

Flare-On 10 solutions Source codes of my solutions for the tasks from Flare-On10 challenge...

CVE-2026-39292

Title: CVE-2026-39292 – Arbitrary File Upload leading to RCE in Falco Solutions PHPPageBuilder v0.31.0 Summary: A file upload vulnerability in the pagemanager/pagebuilder module allows authenticated/unauthenticated attackers to upload arbitrary files resulting in remote code execution. Affected...

Ricnar-Exploit-Solutions

Solutions to the challenges proposed by Ricardo Narvaja and Crack Latinos http://www.ricardonarvaja.info/WEB/EXPLOITING/...

CVE-2022-29598

CVE-2022-29598 : Reflected Cross-Site Scripting XSS in RSS v500 Mitre URL: https://vulners.com/cve/CVE-2022-29598 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 The RRS v500 application by Solutions Atlantic is vulnerable to a reflected Cross-Site Scripting XSS vulnerability...

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

Vulnerability-Management

Vulnerability Management Report Prepared for: CyberTech Solutions Prepared by: Victoria Simon Date: April 10, 2024 1. Executive Summary This report details the findings from a comprehensive vulnerability assessment conducted on CyberTech Solutions' Linux infrastructure and web applications using...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Vulnerability discoverd by me CVE-2019-15233 Advisory: advisory Basic Info Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site Scripting CWE-...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-105455: Best Practical Solutions RT for Incident Response: RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident…

RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...

CVE-2026-105454: Best Practical Solutions Request Tracker: RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link

RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can add a script that runs when the ticket history is displayed, with no further action by the viewer. Anyone who can add HTML content ...

CVE-2026-105456: Best Practical Solutions RT for Incident Response: RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that…

RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...