Pisay Online E-Learning System version 1.0 suffers from remote SQL Injection and code execution vulnerabilities.

YesWiki cercopitheque version 2020.04.18.1 suffers from a remote SQL injection vulnerability.

Online Clothing Store version 1.0 suffers from a remote SQL injection vulnerability.

Online AgroCulture Farm Management System version 1.0 suffers from a remote SQL injection vulnerability.

School File Management System version 1.0 suffers from a remote SQL injection vulnerability.

Car Park Management System version 1.0 suffers a remote SQL injection vulnerability that allows for authentication bypass.

WordPress ChopSlider plugin version 3 suffers from a remote SQL injection vulnerability.

Creative Zone suffers from a remote SQL injection vulnerability.

This is a simple perl script to perform dictionary attacks against the KeePass password manager.

Simple script to perform RC4 encryption / decryption.

Script that performs RSA factorization attack using Fermat's algorithm.

This is a script to perform SSH/SSL RSA private key passphrase enumeration with a dictionary attack.

Script to perform basic XOR file encryption / decryption.

Delta Industrial Automation DCISoft version 1.12.09 suffers from a stack buffer overflow vulnerability.

Max Secure Anti Virus Plus version 19.0.4.020 suffers from an insecure permission vulnerability.

Whitepaper called Hacking Dispositivos iOS. It demonstrates how dangerous it is to be connected to a wireless network with an iOS device that has OpenSSH enabled. Written in Spanish.

This is a brief whitepaper discussing how to perform forensics on iOS 5 on the iPhone.

IPhone TreasonSMS suffers from html injection and file inclusion vulnerabilities.

This whitepaper details some of the vulnerabilities observed over the past year while performing regular security assessments of iPhone and iPad applications. MDSec documents some of the vulnerabilities identified as well as the methods to exploit them, and recommendations that developers can adopt to protect their iOS applications. It covers not only the security features of the platform, but provides in depth information on how to perform both black box and white box iOS penetration tests, along with suggested methodologies and compliance.

Air Disk Wireless version 1.9 for iPad and iPhone suffers from local file inclusion and command injection vulnerabilities.

Transferable Remote version 1.1 for iPad and iPhone suffers from cross site scripting, remote command injection, and local file inclusion vulnerabilities.

Symantec Mobile Encryption for iPhone version 2.1.0 suffers from a denial of service vulnerability.

This repository contains several tools Project Zero uses to test iPhone messaging. It includes SmsSimulator: an SMS simulator for iPhone, iMessage: tools for sending and dumping iMessage messages, and imapiness: a fuzzer for IMAP clients. See the directory for each tool for further instructions and contact information. This is not an officially supported Google product. These tools were released and presented at BlackHat USA 2019.