vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C Unlock-Free Caps-Root Tool — Arbitrary physical-write privilege escalation based on CVE-2025-21479 Adreno GPU SDS No bootloader unlock, no flashing, no Magisk required. Achieves kernel-level arbitrary physical write through a GPU vulnerability; after patching key kernel...

CVE-2025-7840

XSS Exploit for CVE-2025-7840 Author : Byte Reaper @ByteReaper0 Description Proof‑of‑concept exploit for CVE-2025-7840 , targeting a vulnerable web application endpoint that fails to sanitize user input on the Firstname parameter of a reservation form. By crafting a GET request to:...

CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 2019 is less than...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CVE-2026-9277

CVE-2026-9277 - Shell-Quote Command Injection Exploit A specialized Proof of Concept PoC exploit script designed to verify and demonstrate CVE-2026-9277 —a structural Command Injection vulnerability found in legacy versions of the shell-quote library = 1.8.3. The scanner performs deep structural...

CVE-2025-60357

CVE-2025-60357- NoSQLMongoDB Injection Vulnerability and Product description AhnLab EPP Management is a globally recognized next-generation advanced endpoint protection platform that integrates patch management, advanced malware detection, EDR, and XDR capabilities. NoSQLMongoDB Injection in was...

codeql-workshop

Finding vulnerabilities with CodeQL Original workshop by Sylwia Budzynska Prerequisites • Resources • Workshop Who is this for : Security Engineers, Security Researchers, Developers. What you'll learn : Learn how to use CodeQL for code exploration and for finding security issues. What you'll buil...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Enigma. 🔍 Key Findings Insecure NFS Share Exposing Onboarding Documents - Medium Severity Internal Credential Disclosure via Unencrypted Email Content -...

CVE-2024-10508

Unauthenticated Privilege Escalation via Password Recovery on RegistrationMagic = 6.0.2.6 Disclaimer : This information is provided for educational purposes only. This document aims to raise awareness of security vulnerabilities and should not be used for any unauthorized or malicious activities...

CVE_2019_2215

CVE-2019-2215 - Android Binder UAF Local Privilege Escalation A rewritten Proof-of-Concept / Local Privilege Escalation LPE exploit targeting CVE-2019-2215 , a Use-After-Free vulnerability in the Android Binder driver. I have provided the vulnerable kernel build in the vulnerablekernelbuilds...

MAL-2026-18054 Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1329498b9f2a24897a73f2e5d2d0ffb8ea848d5f6699a703fa88dcbe8b578852 The CLI prompts the user for an Anthropic API key sk-ant-... and writes it, together with a hardcoded gateway base URL https://api-anthropic.help, in...

Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1329498b9f2a24897a73f2e5d2d0ffb8ea848d5f6699a703fa88dcbe8b578852 The CLI prompts the user for an Anthropic API key sk-ant-... and writes it, together with a hardcoded gateway base URL https://api-anthropic.help, in...

CVE-2023-27163

CVE-2023-27163 Python implementation of CVE-2023-27163 Installation To install the project dependencies, follow these steps: 1. Clone the repository: git clone https://github.com/yourusername/yourrepository.git 2. Navigate into the project directory: cd yourrepository 3. Install the dependencies...

CVE-2025-0133

CVE-2025-0133 Vulnerability Scanner A Bash-based automated scanner tool for detecting the CVE-2025-0133 Reflected XSS vulnerability in Palo Alto GlobalProtect Gateway & Portal using nuclei and shodanx. Author : Date : 2025-06-23 Severity : Medium CVE ID : CVE-2025-0133 Vulnerability Type :...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...

CVE-2021-38163

CVE-2021-38163 - SAP NetWeaver AS Java Desynchronization Vulnerability Description CVE-2021-38163 is a security vulnerability in SAP NetWeaver Application Server AS Java that allows an authenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution RCE...

wakuwaku

AppleDog/Hooks This repository is part of a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during Git clone operations. This repository contains malicious hooks used to exploit this vulnerability. Overview For detailed explanations and descriptions of exploiting the...

grafana: Grafana: Unauthorized configuration modification via status subresource

A flaw was found in Grafana. An improper authorization vulnerability allows an authenticated user or service account with read-only access to modify Git Sync connection configurations through the status subresource. Consequently, an attacker can make unauthorized configuration changes despite...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...