SprayingToolkit

Deprecation Notice This project is no longer maintained. The following alternative projects are better and actively maintained: TREVORspray CredMaster SprayingToolkit Description A set of Python scripts/utilities that tries to make password spraying attacks against Lync/S4B & OWA a lot quicker,...

gorilla

gorilla gorilla is the ultimate wordlist tool packing a lot of amazing utilities like: building wordlists based on patterns like crunch building wordlists based on common password/username formats like cupp scrap a web page and build a wordlist from its words like cewl extending existing wordlist...

ZigRaceExploit

CVE-2021-25741 — TOCTOU Symlink Race Exploit in Zig Educational exploit of the TOCTOU Time Of Check, Time Of Use race condition behind CVE-2021-25741, a vulnerability in the Kubernetes kubelet. The project demonstrates locally without a K8s cluster how a concurrent symlink swap can bypass a path...

wp2shell

wp2shell Exploit WordPress REST API route confusion CVE-2026-63030 + SQL injection CVE-2026-60137 in the batch endpoint to achieve Remote Code Execution. Vulnerabilities Route Confusion CVE-2026-63030 The WordPress REST API batch endpoint /batch/v1 does not properly isolate request routing. By...

APIHarvester

ApiHarvester A full-pipeline black-box API security scanner written in Python. It enumerates endpoints, identifies parameters, probes HTTP methods, tests authentication/authorization logic, and runs standard OWASP API Top 10 attack simulations BOLA, Broken Auth, BFLA, Mass Assignment, Rate...

CVE-2026-59734-POC

Hacker Glitch 🚨 CVE-2026-59734 — Coolify RCE Exploit OS Command Injection in Health Check → Remote Code Execution Proof-of-Concept exploit for OS Command Injection in Coolify's health check configuration. Any authenticated user could execute arbitrary commands inside deployed containers. 🎯 About...

pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — frontend OIDC session hijacking Static frontend that runs the OIDC flow authorization code against a Keycloak and exposes the sessionid hijacking hook of the PoC. It is served with nginx on port 5174 for team use. Launching it on the VPS cd vps/pocCVE0264 docker compose up -d...

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

openSUSE 16 Security Update : pcapplusplus (openSUSE-SU-2026:22017-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22017-1 advisory. Changes in pcapplusplus: - Update to version 26.07 libpcap / WinPcap / Npcap is now optional. Bumped the minimum required C++ standard to C++14...

CVE-2023-38831

Detection Logic for CVE-2023-38831 WinRAR Exploit This repository contains a detection logic for CVE-2023-38831 WinRAR ZIP file spoofing / double-extension exploit with raw queries / code blocks and ETW-specific provider names + Event IDs. A vulnerable version of WinRAR 6.23 on the target system...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML Authentication Bypass PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑60206 , a critical authentication bypass vulnerability in the SAML implementation of Oracle WebLogic Server. The flaw allows a remote, low‑privileged attacker to...

CVE-2026-15981

CVE-2026-15981 SAML Single Sign On = 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter CVE-2026-15981 SAML Single Sign On ≤ 5.4.4 — Unauthenticated Authentication Bypass Proof-of-Concept Exploit Malformed Signature → opensslverify returns -1 → PHP loose cast to true →...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Summary This vulnerability arises from hardcoded cryptographic keys in Gladinet CentreStack and Triofox products, enabling arbitrary file read through forged access tickets. The AES-256 encryption implementation uses static, unchanging keys...

EmailXpose

EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...

CVE-2026-49049

CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-46242 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix epremove struct eventpoll / struct file UAF...

CVE-2026-93616-check

Check Point Security Management Unauthenticated RCE — Vulnerability Detection Script An unauthenticated patch-state check for CVE-2026-93616, the unauthenticated directory traversal in the Check Point Security Management CPM server that reaches Runtime.exec, fixed in sk1000171 on 2026-09-22...

struts-uploader-vulnerability

CVE-2024-53677 — How the Exploit Works and How to Run It Vulnerability summary The flaw is in how Struts' FileUploadInterceptor hands off the uploaded filename to the action class. Normally the interceptor sanitizes the filename, but Struts also lets any multipart parameter be processed as an OGN...

Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. User Entity Behavior Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2011-4969 DESCRIPTION:...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in September 2026. Vulnerability Details CVEID:CVE-2025-71329 DESCRIPTION: image-size through 2.0.2 contains a denial of...