ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Análisis de vulnerabilidad de escalada de privilegios del servicio en primer plano de Android Antecedentes de la vulnerabilidad En el parche de AOSP de 2020-08, se reveló una vulnerabilidad en el marco AMS, con el identificador CVE-2020-0108,...

react2shell

React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. ❌ DO NOT use against system...

CVE-2023-32364-macos-app-sandbox-escape

CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...

flask_appengine_redirector

flaskappengineredirector Google App Engine Flask C2 redirector A simple Python Flask example application that's ready to run on App Engine. Development Setup Install SDK: https://cloud.google.com/sdk/docs/ Run dev instance: devappserver.py app.yaml Deploy gcloud app create gcloud app deploy Setup...

defenselessV1

defenselessV1 Defenseless es una aplicación web vulnerable escrita en PHP/MySQL. Esta es la primera versión de esta aplicación. El propósito de esta aplicación es crear conciencia de seguridad entre los desarrolladores y los nuevos en seguridad de aplicaciones. Pronto se actualizará con más error...

spring4shell_victim

spring4shellvictim تطبيق Spring ضعيف عمدًا لاختبار CVE-2022-22965 لمزيد من المعلومات: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ الاستخدام البناء سينشئ الكود التالي بسرعة صورة Docker ضعيفة باستخدام المكونات التالية: JDK 11.0.14 Tomcat 9.0.60 Spring 2.6.4 git...

CVE-2025-29927-test

CVE-2025-29927 Verification App We introduced this vulnerability at the 51st Security Study Group for Beginners. The presentation slides are available here. Usage Access the app using one of the methods below. Detailed usage is described on the app's top page. Method 1: Try with a container...

dvwassl

Aplicación Web Vulnerable a Prueba con SSL activado Ejecuta una Aplicación Web Vulnerable a Prueba con SSL activado. ¿Por qué? Es posible que quieras probar detecciones de ataques web a través de SSL. Construir la imagen docker build -t dvwassl:latest . Ejecutar el contenedor docker run -d -p...

mobileAudit

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

layne

Layne Layne is a self-hosted GitHub App that centralizes security scanning across our repositories. Since we don't use commercial SAST/secrets scanning tools, nor we have access to GitHub Enterprise, it can get hard to maintain different GitHub Actions workflow files across different repositories...

domain-to-webapp

domain-to-webapp Un script bash simple para encontrar aplicaciones web alojadas dentro de un dominio Requisitos curl Subfinder docker image Uso $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | ' \ | || |...

Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting

WPMobile.App versions up to 11.41 contain a reflected cross-site scripting XSS caused by improper input neutralization during web page generation, letting attackers execute scripts in the victim's browser, exploit requires attacker to craft malicious input. id: CVE-2024-35694 info: name: Wordpres...

WPMobile.App <= 11.56 - Open Redirect

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover

Hippoo Mobile App for WooCommerce WordPress plugin = 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset. id: CVE-2026-10580 info: name: Hippoo Mobile App for...

WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass

Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users. id: CVE-2024-50477 info: name: WordPress Stacks Mobile App Builder =5.2.3 - Authentication Bypass...

OX Appsuite - Cross-Site Scripting

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. id: CVE-2020-24701 info: name: OX Appsuite - Cross-Site Scripting author: DhiyaneshDk severity: medium description: | OX App Suite through 7.10.4 allows XSS via the app loading mechanism the...

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...