CVE-2026-112074

A security flaw exists in the Tencent ncnn library (up to version 44b02dabdcf97499281a4692ebd65bad73dcf8b6) within the Conversion API component. Specifically, the function ncnn::yuv420sp2rgb in the file src/mat_pixel.cpp is susceptible to an integer overflow (CWE-190, CWE-189). This vulnerability...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

CVE-2018-18649

CVE-2018-18649 CVE-2018-18649 EXP For the EXP description, see: Gitlab Wiki API Remote Command Execution Vulnerability CVE-2018-18649...

LoadReload

LoadReload Shellcode Loader based on what i did for my Master Thesis, designed for Sliver-Shellcode smaller than 25MB..... !Note Features: Multibyte-XOR Decryption of Payload Fetches Payload locally Anti-Emulation by BusySleep-Function via KUSERSHAREDDATA RW-RX-Loop for EDR-Deconditioning / Wasti...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

CVE-2026-112044

A security vulnerability exists in dotnet eShop (up to commit 913acea66708a59595351174cee9b29f37179d29). The flaw is located in the AddApplicationServices function within the file src/Catalog.API/Extensions/Extensions.cs of the Catalog API component. This vulnerability allows for improper authent...

EUVD-2026-104053

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

DInvoke_rs

DInvokers Rust port of Dinvoke. DInvokers may be used for many purposes such as PE parsing, dynamic exported functions resolution, dynamically loading PE plugins at runtime, API hooks evasion and more. Features: Dynamically resolve and invoke undocumented Windows APIs from Rust. Primitives allowi...

CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector Admin Bypass Unauthenticated WordPress Admin Login viaorigin=mo Parameter Modular Connector Plugin ≤ 2.5.1 📖 Description The Modular Connector plugin for WordPress versions ≤ 2.5.1 contains a critical authentication bypass vulnerability. An unauthenticated...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

SpEL

SpEL Batch detection tool for Spring Cloud Gateway Actuator API SpEL expression injection command execution CVE-2022-22947 Usage Write the URLs to be tested line by line in a file. Use parameter -TF to specify the file, and -t for concurrency count. Execution Result Yutu Security is committed to...

CVE-2026-63030

LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CVE-2026-63030 Chained with CVE-2026-60137 Severity: Critical CVSS 9.8 Type: Pre-Authentication Remote Code Execution RCE ⚠️ Disclaimer This tool is provided strictly for educational purposes and authorized security testing only. By using this tool,...

CVE-2022-1388

CVE-2022-1388 A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. USAGE python3 f5bigipscanner.py...

openapi-parser

openapi-parser !UPDATE This extension has been updated to use the latest Burp Montoya Java API. The extension has undergone a complete overhaul to improve both its UI/UX and performance. These changes ensure that the extension is modern and optimised for use. openapi-parser is a Burp Suite...

SwaggerSpy

SwaggerSpy Overview SwaggerSpy is a tool designed for automated Open Source Intelligence OSINT on SwaggerHub. This project aims to streamline the process of gathering intelligence from APIs documented on SwaggerHub, providing valuable insights for security researchers, developers, and IT...

godehashed

Godehashed A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis. Screenshot Dehashed API You must supply the tool an api key. See apikeytemplate.txt for example. Installation To install the tool in CLI run the...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester is created to automatically test API for common vulnerabilities after generating tests from openapi specification file. It provides feature to automatically fuzz inputs and use user provided inputs during tests specified via YAML config file. Demo Note...

flare-ida

Code Grafter Function Replacements About Code Grafter Code Grafter is an IDA Python script that makes it possible to use IDA Pro's Bochs IDB Mode to emulate code that imports Windows API functions. Emulation environments like Bochs IDB mode do not resolve or emulate imported functions, resulting ...