linux-kernel-zero-day-mitigation-zero-downtime-kernel-defense-

Zero-Downtime Linux Kernel Zero-Day Defense: Layered Compensating Controls via eBPF Telemetry, Module Disarmament, and User Namespaces -black?style=flat-square When the Cybersecurity and Infrastructure Security Agency CISA adds critical Linux kernel vulnerabilities to its Known Exploited...

postgresql-cve-2026-14662

Chasing CVE-2026-14662 — An Out-of-Bounds Write Vulnerability in PostgreSQL Full-Text Search This is a record of running the pre-fix 18.4 and post-fix 18.6 versions of PostgreSQL simultaneously in Docker and actually observing the difference in behavior regarding CVE-2026-14662, which was found i...

CVE-2026-93485

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2025-32433-PoC

CVE-2025-32433: Erlang/OTP SSH Unauthenticated RCE PoC This repository contains a Proof-of-Concept PoC for CVE-2025-32433, a critical unauthenticated Remote Code Execution RCE vulnerability affecting the SSH server implementation in Erlang/Open Telecom Platform OTP. This PoC is designed for...

flask_heroku_redirector

Flask Heroku C2 Sample A simple Python Flask example application that's ready to run on Heroku. Development Setup virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Deploy heroku create git push heroku master Setup set port to forward on Defaults to 80: heroku...

VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable Findings — evidence chain per CVE Dashboard —...

OWASP-WSTG-Rag

OWASP WSTG RAG A Retrieval-Augmented Generation RAG system that indexes the OWASP Web Security Testing Guide WSTG into a vector database, providing instant access to security testing methodologies via REST API and MCP Model Context Protocol for Claude Code integration. Features Complete WSTG...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

RDPassSpray

RDPassSpray RDPassSpary is a python tool to perform password spray attack in a Microsoft domain environment. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: pip3 install -r requirements.txt Second, make sure you have xfreerdp: apt-g...

staystaystay

staystaystay staystaystay is a proof of concept exploit for CVE-2021-1585, a man in the middle or evil endpoint RCE issue affecting Cisco ASA Device Manager ASDM. The issue was originally discovered by Malcolm Lashley and disclosed in the summer of 2021. However, at the time I was looking at this...

sony-vp-extract

Sony WH-1000XM4 Voice Pack Extractor Decrypt and extract the voice guidance MP3 prompts from Sony WH-1000XM4 encrypted firmware files. The AES-128-CBC key was extracted by dumping the he...

CVE-2026-78838

CVE-2026-78838 Description A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

RATDecoders

RATDecoders Malconf is a python3 library that can be used to staticly analyse specific malware families and extract the Configuration data that can be used by Incident Responders during an incident. As a library it can also be installed in to automated malware analysis pipelines. Installation...

-CVE-2023-30845

CVE-2023-30845 This is a script for CVE 2023-30845 automatically across multiple subdomains Metódos de uso: CLONE REPOSITORY| GIVE PERMISSION TO THE FILE| RUN THE FILE ---|---|--- https://github.com/himori123/-CVE-2023-30845.git| chmod +x CVE-2023-30845.sh| ./CVE-2023-30845.sh...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

Storm-Breaker

A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...

GHSA-c9cx-7r7m-264v

GHSA-c9cx-7r7m-264v — InvoiceShelf cross-tenant privilege esca...

CVE-2025-34077

CVE-2025-34077 — WordPress Pie Register ≤ 3.7.1.4 - Admin Privilege Escalation Unauthenticated 💀 Author Mrj Haxcore 🧠 Vulnerability Summary The Pie Register plugin for WordPress version ≤ 3.7.1.4 exposes an unauthenticated endpoint that allows an attacker to hijack admin sessions simply by POSTin...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

Kaonashi

Kaonashi Project: RootedCON 2019 This repository contains several directories: Sorted Masks for hashcat Advanced Rules for hashcat Links to download the Kaonishi's Wordlists Slides used in our talk I know your p4$$w0rd and if I don't, I will guess it... at RootedCON 2019 A clone may not be...