W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...

piraterf

🏴‍☠️ PIrateRF - Software-Defined Radio Transmission Platform PIrateRF transforms your Raspberry Pi Zero W into a portable RF signal generator that spawns its own WiFi hotspot. Control everything from FM broadcasts to digital modes through your browser - hack the airwaves from anywhere! 📡⚡ 🎬 Click...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

EUVD-2026-115232

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without checking that pointer against the thread's stack. A user-mod...

badspin

Bad Spin: Android Binder LPE Author: Moshe Kol Privilege escalation exploit from unstrustedapp for Android Binder vulnerability CVE-2022-20421. The vulnerability is patched on Android's Security Bulletin of October 2022. The exploit works on devices running kernel versions 5.4.x and 5.10.x, and i...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...

gvcidrv64

hi hackers. GVCIDrv64.sys is the signed kernel driver that ships with Gigabyte's BIOS utility. It creates \.\GVCIDrv64 with no security descriptor, so any local user can open it no admin, no UAC. It exposes 3 IOCTLs with zero access control: map 32 MB of physical memory 0x9C406580, unmap...

CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W Full proof-of-concept for the TechPowerUp ThrottleStop.sys driver CVE-2025-7771. A signed, still-loadable kernel driver exposes unvalidated physical memory read and write through two IOCTLs. This repo turns that primitive into a worki...

CVE-2026-62958

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

CVE-2026-62958

Prior to version 1.18 , libriscv (a RISC-V sandbox and emulator) is vulnerable to an out-of-bounds read in its ELF parser. The root cause is that Memory::serialize_execute_segment and Memory::lookup() trust section-header sh_offset and sh_size values without verifying the file range against m_bin...

CVE-2026-62958 libriscv: Out of bounds read vuln in the ELF parser (Denial of service)

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

Exploit for OS Command Injection in Dasannetworks W-Web

CVE-2023-42495 — Dasan W-Web — OS command injection Лаборатор...

stealth_call

What is this? Header-only library for Windows x64 that lets you invoke any NT syscall without touching ntdll imports, without leaving strings in your binary, and without the usual red flags that make EDRs lose their minds. No CRT. No STL. No IAT. The whole thing compiles down to 19KB with literal...

PT-2026-134209

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binary loader checks PT LOAD program-header bounds, but Memory::serialize execute segment trusts section-header sh offset and sh size when locating .text...

test21

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

CVE-2026-117990

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

MAL-2026-18293 Malicious code in w-mousekey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90980104a84f52c4a98cc74642b9ff7a6c0556771e20b6f6eaeb96eb876cd979 Analysis of [email protected] produced no indicators of installer-side harm. No install-time or import-time execution of attacker-controlled code, no...

Malware in w-mousekey

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...