wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit for WordPress wp-jobhunt plugin wp-jobhunt plugin is a plugin used with JobCareer theme: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 see changelog at the bottom Python exploit for CVE-2018-19487 AJ...

CVE-2026-9809

CVE-2026-9809 CVE-2026-9809 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1. The flaw exists in the Projects component, where project names are displayed as tags and hover popovers on administrative pages such as campaigns, emails, and for...

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

refreshing-mcp-tool

This isn't really done or ready yet, but I wanted to get the code checked in. This basically implements F5's database protocol, "mcp", which operates through a UNIX domain socket. That means that you need a shell on the F5 device before you can use any of these. You'll typically forward the outpu...

CVE-2024-3183-POC

CVE-2024-3183-POC POC for CVE-2024-3183 FreeIPA Rosting Impact: A low-privileged user can obtain a hash of the passwords of all domain users and perform offline brute force kerberoasting. Patch impacket-getTGT: 1. Add decoder.decode.defaultErrorState = stGetValueDecoderByTag to...

CVE-2021-22555-Exploit

CVE-2021-22555-Exploit CVE-2021-22555 Exploit By Andy Nguyen INFO A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a DoS via heap memory corruption through user name space 編譯 gcc -m32 -stati...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

twifo-cli

T W I F O - C L I Get user information of a Twitter user! Install $ npm install --global twifo-cli OR $ sudo npm install --global twifo-cli Usage $ Usage: twifo Example: $ twifo 9gag Related twifo : API for this tool. quorafy: Get user information of a Quora user. License MIT © Rishi Giri...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 This repository contains a Proof of Concept PoC script for exploiting a privilege escalation vulnerability in the LiteSpeed Cache WordPress plugin. The vulnerability, identified as CVE-2024-28000 , allows unauthenticated users to gain...

cracked

Cracked Download and train your retro-engineering skills 🖳 What is Cracked? Cracked is a TUI for downloading quickly crackmes.one challenges while staying in your terminal. How to use Cracked? Installation cargo install cracked Usage $ cracked --help Usage: cracked OPTIONS Options: -n, --name...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

CVE-2022-26138

CVE-2022-26138 POC Description The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Inter Process Communication through shared memory is a concept where two or more process can access the common memory. And communication is done via this shared memory where changes made by one process can be viewed by another process. The kern...

CVE-2025-31161

CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The default is set to...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

CVE-2026-108953

The software mac-shell-mcp before version 2.0.0 is vulnerable to an OS command injection (CWE-78) within the execute_command arguments. This flaw allows MCP clients to bypass the command whitelist by injecting shell metacharacters (e.g., ;) into arguments of safe commands like pwd. Successful exp...

CVE-2026-108951

LavaLite CMS versions through 10.1.2 are vulnerable to an authorization bypass in the user update API. The flaw stems from an improper check within the AbstractRequest isWorkflow() function. This allows authenticated low-privileged users to send a PATCH request to the user update route, using a t...

EUVD-2026-97358

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...