CVE-2026-115389

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-typed Val API, bypassing the hostcall fuel limit. A malicious WebAssembly guest can return crafted values that allocate at lea...

CVE-2026-115382

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

CVE-2026-114519

Missing Authorization CWE-862 in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic role to read the accounts of other users of its own company, including accounts with higher privileges, and, in versions from 3.5.0, to delete them, because the routes GET...

CVE-2022-51026

Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLABSELFHOST endpoint. Attackers can set instanceUrl t...

wavedigger

WaveDigger Dig into wireless signals to discover their physical locations. WaveDigger helps you find Wi-Fi access points by their BSSID MAC address and cell towers LTE and 5G NR by their network parameters. Built with Next.js, TypeScript, and deck.gl for interactive map visualization. A hosted...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

burp-rest-api

burp-rest-api ⚠️ WARNING: This project is no longer actively maintained. While the repository will remain available for reference, no further updates, bug fixes, or support will be provided. Overview A REST/JSON API to the Burp Suite security tool. Since the first commit back in 2016, burp-rest-ap...

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

twitter-advanced-search

🔍 Advanced Search on Twitter These operators work on Web, Mobile, Tweetdeck. There is some overlap, but largely these will not work for v1.1 Search, Premium Search, or v2 Search APIs. Adapted from TweetDeck Help, @lucahammer Guide, @eevee Twitter Manual, @pushshift and Twitter / Tweetdeck itself...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

CVE-2022-36804-POC

CVE-2022-36804-POC 🕷️ Bitbucket CVE-2022-36804 unauthenticated remote command execution Exploitation Find publicly visible repositories - example.com/repos?visibility=public...

RPC-Backdoor

RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: Execute a command with cmd.exe /c and the CreateProcess API call. Steal a token and execute a command with cmd.e...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

VAmPI

VAmPI The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes...

CVE-2025-20281-Cisco

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 Vulnerability Lab Educational lab demonstrating exploitation of CVE-2018-7600 Drupalgeddon2 using a vulnerable Drupal 7.56 environment deployed with Docker. This project simulates a real-world vulnerability assessment workflow, including: Vulnerable environment setup...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...

Rusty-Playground

Rusty-Playground 🦀 A collection of Rust programs showcasing some offensive-securtiy and evasions techniques Tool| Description| References ---|---|--- ClipboardMon| Monitors the clipboard for changes and logs clipboard content or copies files depending on detected changes.| - DumpMDEConfig|...

vuln4japi

vuln4japi A vulnerable Java based REST API for demonstrating CVE-2021-44228 log4shell. Motivation Log4Shell took the internet by storm in early December 2021. A Zero Day vulnerability in the Apache Log4j logging library, capable of Remote Code Execution RCE that had organizations across the globe...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...