Vulnerability Analysis

CVE-2024-38063 : A Deep Dive Into Remote Code Execution In tcpip.sys

This is a (rather flaky) poc for CVE-2024-38063, a RCE in tcpip.sys patched on August 13th 2024. I didn't find and…

3 months ago

LiteSpeed Cache Privilege Escalation PoC – CVE-2024-28000

This repository contains a Proof of Concept (PoC) script for exploiting a privilege escalation vulnerability in the LiteSpeed Cache WordPress…

3 months ago

CVE-2024-38856 : A Practical Guide To Leveraging Bash And Nuclei

In this comprehensive guide, we delve into the intricacies of CVE-2024-38856, a critical vulnerability that has surfaced in cybersecurity discussions.…

3 months ago

CVE-2024-38077 : A Zero-Click RCE Threat In Windows Server 2025

Earlier this year, we conducted an in-depth analysis of the Windows Remote Desktop Services. Multiple vulnerabilities were discovered, and all…

3 months ago

TCA – A Comprehensive Toolkit For Code Analysis And Quality Assurance

Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a comprehensive platform for code analysis…

3 months ago

2024-PocLib : Comprehensive Vulnerability And Security Exploit Overview

The 2024-PocLib project serves as a crucial resource for cybersecurity enthusiasts and researchers, offering a detailed compilation of the latest…

3 months ago

GeoServer Vulnerability : Reverse Shell Execution For CVE-2024-36401

POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on…

4 months ago

VulnNodeApp – Exploring Web Vulnerabilities With A Node.js Educational Tool

A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only.…

5 months ago

CVE-2024-26229 : Address Validation Flaws In IOCTL With METHOD_NEITHER

delve into CVE-2024-26229, a critical security vulnerability identified within the csc.sys driver, pivotal in handling I/O control codes. This issue…

5 months ago

CVE-2023-4427 – Unveiling Chrome Vulnerability Exploitation And Mitigation Strategies

In this article, we delve into the intricacies of a recently discovered vulnerability in Google Chrome, identified as CVE-2023-4427. Discovered…

9 months ago