Exploits_and_Advisories

Exploits and Advisories Repository that tracks public exploits, vulnerabilities and advisories that I co-discovered or co-authored. CVEs CVE| ID| Target| Description| Disclosure ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| DNS stack overflow| Pwn2Own Tokyo 2019...

ABD

Advanced Binary Deobfuscation This repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp GCC Tokyo and the Security Camp National Workshop in 2020. Course Abstract Reverse engineering is not easy, especially if a binary code is obfuscated. Once...

CVE-2020-10882

Reference links https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2026-40639

creationtimestamp| type| source ---|---|--- 2026-07-11 06:22:17+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k 2026-07-11 17:39:31+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u 2026-07-12 14:01:19+00:00| seen|...

GHSA-62WX-5F55-W8G2

creationtimestamp| type| source ---|---|--- 2026-06-10 08:20:23+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mnwbp5imih22...

CVE-2026-21571

creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:24+00:00| seen| Telegram/IV3XUTumqBvhxDGxYKmJv890gnK1hu13PgwZ6nuJXKkSo 2026-04-22 10:29:47+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mk3c3fq5va2c 2026-04-23 17:42:03+00:00| seen|...

Team Mirai and Democracy

Japan’s election last month and the rise of the country’s newest and most innovative political party, Team Mirai, illustrates the viability of a different way to do politics. In this model, technology is used to make democratic processes stronger, instead of undermining them. It is harnessed to...

Synchronized DNA Sources for Unconditionally Secure Cryptography

Secure communication is the cornerstone of modern infrastructures, yet achieving unconditional security -resistant to any computational attack- remains a fundamental challenge. The One-Time Pad OTP, proven by Shannon to offer perfect secrecy, requires a shared random key as long as the message,...

MAL-2026-699 Malicious code in tokyo-ppe-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c5907d5bd4d20875048608d41ca58ea06687c84a0c7804cc83f3c3d706ff5fe4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Tokyo FM Data Breach: Hacker Claims Over 3 Million Records Stolen

Tokyo FM is investigating claims of a massive data breach involving 3 million records. Learn what information was allegedly taken and how you can stay safe...

EUVD-2016-2286

Malware in sbrugna...

EUVD-2012-3963

Malware in sbrugna...

EUVD-2016-8661

Malware in sbrugna...

EUVD-2023-30551

Malicious code in bioql PyPI...

CVE-2023-26758

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService...

Supporting Cloud Growth in Japan: Tokyo Expansion

...

esrp.rcast.u-tokyo.ac.jp Cross Site Scripting vulnerability OBB-3935016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

portal-tokyoport.jp Cross Site Scripting vulnerability OBB-3934857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bayworks-tokyo.info Cross Site Scripting vulnerability OBB-3906854

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyomentalhealth.com Cross Site Scripting vulnerability OBB-3905449

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...