
My-Presentation-Slides
Collections of Orange Tsai's public presentation slides.

Collections of Orange Tsai's public presentation slides.

Iot Camera 0day

Proof-of-concept reproduction of an nginx heap overflow and info leak (CVE-2026-42533) with two attack surfaces, debug analysis, and a full RCE chain.


Proof-of-Concept and technical analysis for CVE-2026-27654, a heap-based buffer overflow vulnerability in the NGINX HTTP WebDAV module, including…

A proof of concept of an SEH overflow with arbitrary dll injection

CVE-2013-2028 python exploit


RTSPServer Code Execution Vulnerability CVE-2018-4013

NGINX RCE exploits


Python RCE PoC with reverse-shell listener for CVE-2026-42945 (NGINX Rift)



CVE-2026-42945 Nginx Rift

Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)

NGINX `ngx_http_dav_module` Heap Buffer Overflow via `size_t` Underflow (Remote DoS / Potential RCE)