cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

kr00ker

kr00ker Description This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices Access Point or Clients. More specifically this script attempts to retrieve decrypted data of WPA2 CCMP packets knowning: the ...

CVE-2019-2215

CVE-2019-2215 Copy and pasted from: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ https://github.com/grant-h/qu1ckr00t/blob/master/native/poc.c...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

SecBugs

Security Bugs Full disclosures for CVE ids, proofs of concept, exploits, 0day bugs and so on...

jscpwn

CVE-2016-4622 PoC exploit for CVE-2016-4622. Find a detailed writeup of the bug on phrack...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

SafeText

SafeText Tool to sanitize text to allow for safe distribution of documents from anonymous sources by removing zero-width characters and homoglpyhs. Individuals attempting to leak an email or other text file face the risk of identification through fingerprinting. Fingerprinting often occurs when t...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

EvilCrowRFCustomFirmwareCC1101FlipperZero Idea, development and implementation of this firmware: h-RAT https://github.com/h-RAT/. Discord: hrat Idea, development and implementation of the original firmware: Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. Main collaborator: Litt...

CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

Flipper

Playground and dump of stuff I made, modified, researched, or found for the Flipper Zero. Looking for Infrared IR codes? Head over tothe IRDB! Just want to download part of any repo? Try over here! If you're new to github in general, check out this great guide from Wr3nch! Other great spots for...

cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

CVE-2025-5548

Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...

EUVD-2026-104639

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

CVE-2026-98647

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the kernel. When loading a specially crafted BPF program that accesses a structure with an empty flexible array member, the verifier...

sonos

sonos/amlogic haxx here you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and...