Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors

Simple DNS Rebinding Service

0day安全_软件漏洞分析技术

The vm images in this repo are lost, we recommend our new project: https://github.com/hust-open-atom-club/S2VulnHub

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition

Original Automated CVE Checking Tool

A bootrom exploit for MediaTek devices

Log4j Vulnerability Scanner for Windows

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

Huorong Internet Security vulnerabilities 火绒安全软件漏洞

历史漏洞的细节以及利用方法汇总收集

Kernel exploits for the Oculus Quest

Unsigned code loader for Exynos BootROM

vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.

Greenbone Vulnerability Management Libraries

Unsigned code loader for Amlogic BootROM

An implementation of the waithax / slowhax 3DS Kernel11 exploit.