longwayhomie Goto Github PK

awesome-security-newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

azure-pipelines

cjmcu-3212

How load sketch in ESP8266 in CJMCU-3212

crs-rce-exploit

Car Rental System 1.0 suffers from SQL Injection on administrator login page and unsecure upload mechanism allowing to upload malicious files. This allows unauthenticated user to obtain reverse shell to server.

cs

WIPE YOUR ASS WITH THE REAL COBALT STRIKE

cve-2017-1000486

Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)

cve-2017-12617

CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution (RCE) in Apache Tomcat.

cve-2021-43798

CVE-2021-43798 is a vulnerability marked as High priority (CVSS 7.5) leading to arbitrary file read via installed plugins in Grafana application.

cve-2021-43857

Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8.

cve-2021-43936

CVE-2021-43936 is a critical vulnerability (CVSS3 10.0) leading to Remote Code Execution (RCE) in WebHMI Firmware.

cve-2022-27434

UNIT4 TETA Mobile Edition 29HF13 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page.

invoke-knockout

A DLL library built to bypass AMSI and ETW. Also can be used directly with PS script.

keys

:key: Cryptocurrency private keys

keys-generator

Key generator for https://keys.lol

maldev

oas-rce-exploit

Online Admission System 1.0 has an issue with Access Control and allows unauthenticated user to upload malicious files, which can be executed directly from studentpics directory.

plutus-dogecoin

An automated bitcoin wallet collider that brute forces random wallet addresses

plutus-ethereum

rtovmsetup

tbhm

The Bug Hunters Methodology