CVE-2026-69191

Prior to version 3.21.0 , FileRise (a self-hosted web-based file manager) is vulnerable to a login method restriction bypass via direct API access. Although administrators can disable specific authentication methods like Form Login , Basic Auth , and OIDC Login in the client interface, the backen...

EUVD-2026-101680

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A...

CVE-2026-69191 FileRise: Login Method Restriction Bypass via Direct API Access

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A...

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

zeek-spicy-ipsec

IPSec This is a Zeek protocol analyzer that detects IPSec VPN based on Spicy. You must install Spicy to use this package. A blog detailing the development of this analyzer: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...

EUVD-2026-101679

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or metadata/persistenttokens.key can activate a published legacy compatibility key. If an attacker...

CVE-2026-77427

The self-hosted file manager FileRise versions 3.9.0 through 3.22.0 is vulnerable to an insecure default cryptographic key fallback in manual installations. If the PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key are missing, the system activates a published legacy compatibility key. An at...

CVE-2026-77427 FileRise: Insecure default cryptographic key fallback in manual installs

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or metadata/persistenttokens.key can activate a published legacy compatibility key. If an attacker...

vcenter_rce

vcenterrce Exploit，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），upload 冰蝎3，getshell Usage： python3 vcenterrce -u url...

CVE-2020-7247-exploit

CVE-2020-7247-exploit OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit Reference: https://www.openwall.com/lists/oss-security/2020/01/28/3 Usage python3 exploit.py Dependencies pip3 install --user pwntools...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

SpotifyC2

SpotifyC2 — Cloud-Based Command Channel Research Execute commands through a Spotify playlist and receive command output through Telegram. What is SpotifyC2? SpotifyC2 is a Windows-based cybersecurity research project that demonstrates how publicly accessible cloud services can be used as a...

CVE-2026-69194

The self-hosted file manager FileRise (prior to version 3.21.0 ) is vulnerable to CWE-79 because the unauthenticated public site configuration API returns the branding.footerHtml value without server-side sanitization. While the frontend performs its own sanitization using an allowlist, the API's...

EUVD-2026-101678

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already...

CVE-2026-69194 FileRise: Unsanitized footerHtml in Public Site Config

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already...

CanaryTokenScanner

CanaryToken / HoneyToken Scanner Detect suspicious URLs including CanaryTokens inside Microsoft Office documents and PDFs. Supported formats: Office Open XML: .docx, .xlsx, .pptx .pdf .zip generic archives Why this exists CanaryTokens an HoneyTokens and other tracking or malicious URLs are often...

NiCOFF

NiCOFF Basically, NiCOFF is a COFF and BOF file loader written in Nim. NiCOFF reads a BOF or COFF file, parses and executes it in the memory. Whole project is based on Yasser's and Kevin's COFF Loader projects. Both the loader and beacon functions in these projects were rewritten in Nim...

canarytokens

Canarytokens by Thinkst Applied Research Overview Canarytokens help track activity and actions on your network. If you have any issues please check out our FAQ over here, or create an issue and we'll try to get back to you as soon as possible. Table of Contents Code of Conduct Deprecations...

wifi_db

!Contributorshttp...

nocturne

nocturne Named after one of my favorite games, "nocturne" is a bin2bin x86-64 PE code virtualizer and binary rewriter. Features Native Call Bridge 30+ VM Handlers Built-in junk code obfuscation Thread-safe per-invocation VM state Usage To use the Nocturne virtualizer, copy and include...