37434 matches found
CVE-2015-4670 Vuln App
This repository does not have a README...
By-Poloss..-..CVE-2026-10580
CVE-2026-10580: Hippoo Mobile App for WooCommerce = 1.9.4 - Unauthenticated Authentication Bypass to Admin Takeover Unauthenticated β Administrator Account Takeover via Logic Conflation Bug π Summary | ---|--- CVE| CVE-2026-10580 Plugin| Hippoo Mobile App for WooCommerce Versi| β€ 1.9.4 CVSS| 9.8...
kestrel
The kernel-level visibility of Falco, with the live UI the kernel-native tools don't ship. Quickstart Β· Spec Β· Views Β· Roadmap Kestrel traces kernel events process exec, file access, network connections with an eBPF agent and streams them to a SvelteKit web app that renders a live activity feed,...
CVE-2019-6447-ES-File-Explorer
CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...
SocialFishMobile
SocialFish Mobile This app is an open-source project to remote control SocialFish, it does not work independently. How to build Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repository $ git clone...
purpleteam-app-scanner
purpleteam application scanner Application scanning component of purpleteam - Currently in alpha Clone this repository. cd to the repository root directory and run: npm install Configuration Copy the config/config.example.json to config/config.local.json. Use the config/config.js for documentatio...
createdump
Windows App LSASS Dump - Proof of Concept This project demonstrates how to dump the LSASS process using the createdump.exe tool, a Microsoft signed executable, from the Windows App, leveraging a custom hook to enable process access to LSASS. Get-AuthentiCodeSignature -FilePath Join-Path -Path...
React2Shell
RSC Sentinel A Firefox extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. ποΈ Overview RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components RSC and Next.js App Router...
Adlisting Classified Ads 2.14.0 - Information Disclosure
Information disclosure issue in the redirect responses, When accessing any page on the website, Sensitive data, such as API keys, server keys, and app IDs, is being exposed in the body of these redirects. id: CVE-2023-4168 info: name: Adlisting Classified Ads 2.14.0 - Information Disclosure autho...
EUVD-2026-95394
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
DumpChromeSecrets
!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...
K0mraid3s-System-Shell-PREBUILT
K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...
quasar-app-webpack-json5-vulnerability
Quasar App quasar-app-webpack-json5-vulnerability A Quasar Project Install the dependencies yarn or npm install Start the app in development mode hot-code reloading, error reporting, etc. quasar dev Lint the files yarn lint or npm run lint Format the files yarn format or npm run format Build the...
test-cve-2025-29927
This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
App-vulnerable
This repository does not have a README...
CVE-2026-77900
A critical vulnerability in Azure App Service (CVE-2026-77900) stems from missing authentication for a critical function. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 9.8 . No specific explo...
creep-web-app-scanner
creep-web-app-scanner A very primitive website scanner currently under development by an NCC Group employee and University graduate with 20% research time. creep currently crawls a site, and searches for potentially interesting information within each page. creep will crawl your HTTP only target...
artemis
Let AI assistants and test suites use real phones like a human. English β’ δΈζζζ‘£ β’ Workflow Showcase β’ Quick Start β’ MCP for IDEs β’ Benchmarks β’ Discord Community Live Demo: Setup driving routes and calculate total durations in Google Maps, then open YouTube to play a Coldplay song. Key Highlights...
bfdecrypt
bfdecrypt Utility to decrypt App Store apps on jailbroken iOS 11.x Decrypt App Store apps on LiberiOS Here's an example using https://github.com/BishopFox/bfinject to decrypt the Reddit app on an Electra-jailbroken iPhone: Cs-iPhone: root bash bfinject -P Reddit -l dylibs/bfdecrypt.dylib + Electr...