CVE-2024-37759_PoC

CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...

CVE-2023-27587-PoC

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

ProtOSINT

ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...

Apisix_Crack

ApisixCrack Overview Apisix series vulnerability detection and exploitation tool, including unauthorized access vulnerability CVE-2021-45232 and default secret key vulnerability CVE-2020-13945, supports batch detection and exploitation. Usage Batch detection: Write URLs line by line in a file,...

CVE-2026-78632

The Okta RADIUS Agent Windows installer contains a vulnerability where it assigns improper write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals. This configuration affects the directories housing the agent configuration, logs, and the AES encryption key . Consequ...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

CVE-2026-85922

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

database-druid

druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Example: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP : Skyvern server port : Your...

CVE-2026-85922

A weak authentication vulnerability in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. This security control bypass has a CVSS v3.1 score of 7.4 and is categorized as HIGH severity. Microsoft has released updates to address this vulnerability; users ar...

CVE-2026-85925

The Azure Key Vault component is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released updates to address this issue; users are ...

CVE-2026-69640

A security feature bypass vulnerability exists in the Windows Key Distribution Center due to incorrect authorization (CWE-863). This flaw allows an authorized attacker to bypass a security feature over a network. The vulnerability has a CVSS 3.1 base score of 5.3 (Medium) , with high confidential...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...

CVE-2026-88132

An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-83843

A vulnerability exists in the Windows Internet Key Exchange (IKE) Protocol caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS 3.1 score indicates a HIGH severity (7.5) with a NETWORK attac...

CVE-2026-69650

The Windows Key Distribution Center is vulnerable to an elevation of privilege flaw due to the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to achieve local privilege escalation. The CVSS 3.1 score is 7.8 (HIGH) , with a LOCAL attack vector ...