CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

zyxel-p870hn-hardware-hacking

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN over UART Two phone photos of an unlabeled router board → serial console → auth bypass → root shell — reproducing the real, still-unpatched chain CVE-2025-0890 hidden supervisor account + CVE-2024-40891 CLI command injection on hardware I...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary Field| Details ---|--- Researcher| Nelson Adhepeau @privlabs Vendor| Netgate Product| pfSense Community Edition Versions| 2.7.2 and 2.8.0 Type| Authenticated Remote Code Execution...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker can remotely...

Cyber-Attack-Analysis

Cybersecurity Case Study: The 2020 Virgin Mobile KSA Breach 📌 Executive Summary In 2020, a significant security incident compromised Virgin Mobile KSA, leading to the theft of sensitive data including employee communications and personal information of over 1,000 users. This repository provides a...

framework_base_CVE-2023-21285_NoPatch

This repository does not have a README...

Wordpress-DOS

CVE-2018-6389 exploit for Wordpress sites A small DOS script targeting an unpatched vulnerability in wordpress sites. Uses /wp-admin/load-scripts.php to request additional scripts from hosting server. Includes large list of scripts as request payload This implementation is for testing purposes on...

CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

ptrace_scope-CVE-2019-13272-privilege-escalation

CVE-2019-13272 It is a privilege escalation vulnerability in Linux. Even now, in most Linux distros it has not been fixed. To run the exploit, you only need to have gdb installed. In the releases I will leave gdb binaries for some architectures. I have based it on the exploit made by s4vitar, but...

hikihack

🛡️ CVE-2017-7921 — Case Study & Awareness This repository documents, for educational and cybersecurity awareness purposes, the possible consequences of equipment vulnerable to CVE-2017-7921 a public vulnerability disclosed in 2017, affecting certain firmware of Hikvision cameras/recorders that hav...

roninforge-angularjs-migration

roninforge-angularjs-migration Source-of-truth repo for the AngularJS to Angular 18 GitHub Copilot instructions package shipped to github/awesome-copilot at instructions/angularjs-to-angular-18.instructions.md. First in a planned series of enterprise-targeted Copilot products from RoninForge...

freePW_tc7200Eploit

This repo contains a PoC iPhone app for CVE : CVE-2014-1677 exploit. The bug/hole was long enough public and a fix should hav been pushed a long time ago. Hopefully this app will make someone bother to push a fix, meanwhile, have fun with this --"...

Follina-attack-CVE-2022-30190-

Follina-attack-CVE-2022-30190- this is a demo attack of FOLLINA exploit , a vulnerability that has been discovered in May 2022 and stood unpatched until June 2022...

CVE-2024-38143

CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability Successful exploitation can lead to possible escalation to NT AUTHORITY\SYSTEM Background While on a client engagement, I had to test a physical laptop and for some reason, stumbled upon this article by Matthew...

CVE-2020-7200

CVE-2020-7200 Download HPE SIM 7.6: https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 Details: https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 Video: https://www.youtube.com/watch?v=QNhcNJtjKyw HPE does not provide a patch but only...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2025-37164

CVE-2025-37164 A remote code execution issue exists in HPE OneView. How does this detection method work? This template matches on the OneView title tag, extracts the version from the JavaScript artifactVersion variable, and flags instances running versions below 11.00 as potentially vulnerable...

llama-cpp-security-patches

llama.cpp Security Patches Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research. Background Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the...

CVE-2023-34233_Proof_OF_Concept

Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...

NotQuite0day

NotQuite0day This repository documents real bugs in real software which we reported to vendors but vendors either ignored our emails and the bugs are not fixed after a long long time. The repo is organized by the release date. In each folder you can read about the bugs, versions affected. If...