blackvue-cve-2023

BlackVue DR750 CVEs + más Lo siguiente es solo con fines educativos, no lo intente en ningún dispositivo que no posea o para el que no tenga permiso de uso. A fecha de redacción, hay aproximadamente 300 dispositivos BlackVue vulnerables en línea, que pueden ser fácilmente descubiertos y explotado...

quantum-zk-proof-poc

PoC for breaking Google's zero-knowledge proof of quantum cryptanalysis This repository contains resources for the Trail of Bits blog post detailing how we beat Google's zero-knowledge proof that they have a high-efficiency quantum circuit for elliptic curve cryptanalysis. It includes our forged...

Wordpress-DOS

CVE-2018-6389 exploit for Wordpress sites A small DOS script targeting an unpatched vulnerability in wordpress sites. Uses /wp-admin/load-scripts.php to request additional scripts from hosting server. Includes large list of scripts as request payload This implementation is for testing purposes on...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Control Inadecuado de la Generación de Código 'Inyección de Código' Resumen CVE-2024-0195 es una vulnerabilidad crítica de inyección de código en la aplicación web spider-flow 0.4.3, específicamente en la función FunctionService.saveFunction del archivo FunctionController.java. Un...

CVE-2020-7200

CVE-2020-7200 Descargar HPE SIM 7.6: https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 Detalles: https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 Vídeo: https://www.youtube.com/watch?v=QNhcNJtjKyw HPE no proporciona un parche, solo...

hikihack

📚 Documentation and illustrations To complement this analysis of the CVE-2017-7921 vulnerability, several resources are provided. They are intended to help understand the potential consequences of a vulnerable device, the importance of security updates, and good security hardening practices. All...

zyxel-p870hn-hardware-hacking

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN over UART Two phone photos of an unlabeled router board → serial console → auth bypass → root shell — reproducing the real, still-unpatched chain CVE-2025-0890 hidden supervisor account + CVE-2024-40891 CLI command injection on hardware I...

Linux Distros Unpatched Vulnerability : CVE-2026-77214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - expat - None Ubuntu Linux - Unknown description CVE-2026-77214 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-55480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - cups - None Ubuntu Linux - Unknown description CVE-2026-55480 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-55453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - cups - None Ubuntu Linux - Unknown description CVE-2026-55453 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-61702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - cups - None Ubuntu Linux - Unknown description CVE-2026-61702 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2024-10448

受影响版本： 血液银行管理系统 BloodBank Management System ：1.0 漏洞信息： 漏洞类型： 跨站请求伪造 CSRF 严重性： 高 状态： 未修补 脆弱端点： 路径： /file/delete.php?bid= 漏洞描述： 在 BloodBank 管理系统的血液请求功能 中发现了一个跨站请求伪造 CSRF 漏洞。当向路径 /file/delete.php?bid= 发送 delete 请求时，该缺陷允许 bid 参数选择要删除的记录。然而，bids 是动态的，取决于添加的血液样本数量，因此为了使请求成功，我在循环中使用了 JavaScript 生成的图像标签。...

CVE-2026-67206

CVE-2026-67206 - Wolf CMS -u -p python exploit.py http://127.0.0.1:8080/ -u ad...

cve-2020-0796

Identificación y mitigación de la vulnerabilidad CVE-2020–0796 sobre la marcha CVE-2020–0796 es una vulnerabilidad de ejecución remota de código previa que reside en el protocolo de comunicación de red Server Message Block 3.0 SMBv3, el cual Microsoft no abordará como parte del martes de parches ...

CVE-2025-37164

CVE-2025-37164 A remote code execution issue exists in HPE OneView. How does this detection method work? This template matches on the OneView title tag, extracts the version from the JavaScript artifactVersion variable, and flags instances running versions below 11.00 as potentially vulnerable...

roninforge-angularjs-migration

roninforge-angularjs-migration Repositorio de referencia para el paquete de instrucciones de GitHub Copilot de AngularJS a Angular 18 enviado a github/awesome-copilot en instructions/angularjs-to-angular-18.instructions.md. Primero de una serie planificada de productos Copilot orientados a empres...

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

Linux Distros Unpatched Vulnerability : CVE-2026-104269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None modsecurity-apache - None Ubuntu Linux - GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules...

Linux Distros Unpatched Vulnerability : CVE-2026-103932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None Ubuntu Linux - GHSA-5m93-4h75-3p2w: @rxGlobal PCRE2 error handling: match-limit fail-open and invalid-pattern crash...