CVE-2026-101533

creationtimestamp| type| source ---|---|--- 2026-10-21 03:12:45+00:00| seen| https://infosec.exchange/users/cve/statuses/117476711766752555...

copy-fail-CVE-2026-31431-shell

CVE-2026-31431 - copyfail shell Local privilege escalation via AFALG socket + splice page-cache overwrite. Overwrites a read-only SUID binary /usr/bin/su with a minimal ELF that calls setuid0 + execve"/bin/sh". No race condition, no per-distro offsets, single shot. $ ./copyfailexp.sh Kernel:...

jdam

jdam - Structure-aware JSON fuzzing jdam is a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON. Many existing fuzzing tools will blindly alter the input and will often cause the result to be invalid...

CVE-2024-42327_Zabbix_SQLI

CVE-2024-42327 - Zabbix SQL Injection Vulnerability SQLI Not blind and not time based POC for CVE-2024-42327, an authenticated SQL Injection in Zabbix through the user.get API Method. This POC is not time based like some of the other POCs I have seen out there. CVE Description The vulnerability...

AtlasLdr

Atlas is a reflective x64 loader that has the following features: Features Retrieve of DLL and PE from a remote server Manual Mapping on a remote process Erase of the DOS Header and NTHeader Magic bytes Position independent code Use of indirect Syscalls ZwOpenProcess ZwAllocateVirtualMemory...

CVE-2026-94042

creationtimestamp| type| source ---|---|--- 2026-10-21 03:10:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117476701113978982...

SharpSecDump

SharpSecDump .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py. By default runs in the context of the current user. Please only use in environments you own or have permission to test against : Usage SharpSecDump.exe -target=192.168.1.15 -u=admin...

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild1. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to t...

medusa

🐍 MEDUSA - AI Security Scanner AI-first security scanner with 40,000+ detection patterns for AI/ML, agents, and LLM applications. 🤖 Works out of the box - no tool installation required. 🚨 200 CVEs: Log4Shell, Spring4Shell, XZ Utils, LangChain RCE, MCP-Remote RCE, React2Shell 🔥medusa scan --git —...

GithubC2

GithubC2 Github as C2 Demonstration , free API = free C2 Infrastructure Demo https://user-images.githubusercontent.com/110354855/192076474-3c1884f8-4a59-4944-b0d6-9dc59c7692f0.mp4...

InSpy

InSpy ⛔ DEPRECATED. This repo is no longer being maintained. Introduction InSpy is a python based LinkedIn enumeration tool. Version 3.0 introduces the automation of domain and email retrieval in addition to randomized headers and xml output support. Installation Run pip install -r requirements.t...

cli

HTTPie CLI: human-friendly HTTP client for the API era HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs & HTTP...

OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

CVE-2026-101524

creationtimestamp| type| source ---|---|--- 2026-10-21 03:07:21+00:00| seen| https://infosec.exchange/users/cve/statuses/117476690553314536...

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information. Features • Installation • Usage • Running asnmap • Join Discord Features ASN to CIDR Lookup ORG to CIDR Lookup DNS to CIDR Lookup IP to CIDR Lookup ASN/DNS/IP/ORG input JSON/CSV/TEXT output STD IN/OUT suppor...

CVE-2025-0282-Full-version

Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...

CVE-2026-101522

creationtimestamp| type| source ---|---|--- 2026-10-21 03:06:41+00:00| seen| https://infosec.exchange/users/cve/statuses/117476687903432718...

TEx

Welcome to Telegram Explorer About The Project TEx is a Telegram Explorer tool created to help Researchers, Investigators and Law Enforcement Agents to Collect and Process the Huge Amount of Data Generated from Criminal, Fraud, Security and Others Telegram Groups. ⚠️ BETA VERSION ⚠️ Please note...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...