Vulnerability Analysis

Dependency-Track 4.11.5 : Updates And Changes

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.If additional details are required, consult…

3 months ago

CVEScannerV2 – Enhancing Network Security With Nmap Vulnerability Detection Script

An advanced Nmap script designed to detect potential vulnerabilities in network services. This article delves into the technical specifics, requirements,…

4 months ago

CVE-2024-38063 : A Deep Dive Into Remote Code Execution In tcpip.sys

This is a (rather flaky) poc for CVE-2024-38063, a RCE in tcpip.sys patched on August 13th 2024. I didn't find and…

4 months ago

LiteSpeed Cache Privilege Escalation PoC – CVE-2024-28000

This repository contains a Proof of Concept (PoC) script for exploiting a privilege escalation vulnerability in the LiteSpeed Cache WordPress…

4 months ago

CVE-2024-38856 : A Practical Guide To Leveraging Bash And Nuclei

In this comprehensive guide, we delve into the intricacies of CVE-2024-38856, a critical vulnerability that has surfaced in cybersecurity discussions.…

4 months ago

CVE-2024-38077 : A Zero-Click RCE Threat In Windows Server 2025

Earlier this year, we conducted an in-depth analysis of the Windows Remote Desktop Services. Multiple vulnerabilities were discovered, and all…

4 months ago

TCA – A Comprehensive Toolkit For Code Analysis And Quality Assurance

Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a comprehensive platform for code analysis…

4 months ago

2024-PocLib : Comprehensive Vulnerability And Security Exploit Overview

The 2024-PocLib project serves as a crucial resource for cybersecurity enthusiasts and researchers, offering a detailed compilation of the latest…

4 months ago

GeoServer Vulnerability : Reverse Shell Execution For CVE-2024-36401

POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on…

5 months ago

VulnNodeApp – Exploring Web Vulnerabilities With A Node.js Educational Tool

A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only.…

6 months ago