Noriben

Noriben Malware Analysis Sandbox Contact Information: @bbaskin on Twitter brian at thebaskins dot com Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, it allows you t...

Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944: Nginx UI Unauthenticated Backup Exploit 📌 Description 27944.py is an exploitation tool for CVE-2026-27944 that allows an attacker to download and decrypt Nginx UI backups without authentication. This vulnerability exists in Nginx UI versions 2.3.2 and allows access to: · User...

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user. Reffer to: https://github.com/G37SYS73M/AdvisoryG37SYS73M/blob/main/CVE-2022-46087/poc.md...

Graffiti

NOTE : Never upload payloads to online checkers Graffiti is a tool to generate obfuscated oneliners to aid in penetration testing situations. Graffiti accepts the following languages for encoding: Python Perl Batch Powershell PHP Bash Graffiti will also accept a language that is not currently on...

CVE-2026-86976

creationtimestamp| type| source ---|---|--- 2026-10-20 01:45:59+00:00| seen| https://infosec.exchange/users/cve/statuses/117470708280542999...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

CVE-2025-45422---Bbox

CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://vulners.com/cve/CVE-2025-45422 This script demonstrates CVE-2025-45422 affecting Proximus b-box routers running firmware version 8c.725A. It leverages the router’s UPnP functionality to create arbitrary port forwardin...

CVE-2010-5230

CVE-2010-5230 Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll, or 4 wintab.dll file in the current working directory, as demonstrated by a directory that contains a .hln or .rdl...

CVE-2025-51862

CVE-2025-51862 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious conten...

CVE-2026-86975

creationtimestamp| type| source ---|---|--- 2026-10-20 01:45:18+00:00| seen| https://infosec.exchange/users/cve/statuses/117470705636255538...

NtlmRelayToEWS

ntlmRelayToEWS Author: Arno0x0x - @Arno0x0x ntlmRelayToEWS is a tool for performing ntlm relay attacks on Exchange Web Services EWS. It spawns an SMBListener on port 445 and an HTTPListener on port 80, waiting for incoming connection from the victim. Once the victim connects to one of the...

CVE-2026-86963

creationtimestamp| type| source ---|---|--- 2026-10-20 01:44:38+00:00| seen| https://infosec.exchange/users/cve/statuses/117470702975121551...

CVE-2026-86962

creationtimestamp| type| source ---|---|--- 2026-10-20 01:43:57+00:00| seen| https://infosec.exchange/users/cve/statuses/117470700321719993 2026-10-20 02:17:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117470832699064898...

CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

CVE-2026-86961

creationtimestamp| type| source ---|---|--- 2026-10-20 01:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/117470697682621145...

CVE-2026-86959

creationtimestamp| type| source ---|---|--- 2026-10-20 01:42:40+00:00| seen| https://infosec.exchange/users/cve/statuses/117470695034874467...

CVE-2018-11784

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2018-11784 Run bellow command to check CVE-2018-11784 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2026-86957

creationtimestamp| type| source ---|---|--- 2026-10-20 01:41:56+00:00| seen| https://infosec.exchange/users/cve/statuses/117470692369399605...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...