CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2023-32315

CVE-2023-32315 Tool for CVE-2023-32315 exploitation. Features: Scans single or bulk targets from txt files Utilizes multiprocessing for faster scanning Automatic login capability Installation: Make sure you're in this repo's directory and have python3 installed Install required packages using: pi...

CVE-2026-85976

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to HTTP response splitting . The root cause is insufficient input sanitization within the Query Console file-exploration endpoint , which can lead to unintended client-side response handling . No specific ...

EUVD-2026-97573

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling...

br0w

br0w Hack The Br0w | Play your browser and learn more, hack fun !! The Br0w is a simple web to learn about and about web security with a browser as a tool that sometimes people forget about more benefits. Maybe it's more like Capture The Flag CTF. One of the challenges is, disable css and base64...

Lilith

Lilith Free & Native Open Source C++ Remote Administration Tool for Windows Lilith is a console-based ultra light-weight RAT developed in C++. It features a straight-forward set of commands that allows for near complete control of a machine. Disclaimer The use of this software on any device that ...

CVE-2026-75888

A flaw in the OpenShift console allows an authenticated user to perform a Server-Side Request Forgery (SSRF) . By providing a specially crafted Helm chart URL that lacks proper validation, an attacker can force the console pod to fetch arbitrary URLs. This vulnerability could lead to the disclosu...

CVE-2026-75888 Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch

A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery SSRF vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading t...

CVE-2026-75888

A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery SSRF vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading t...

EUVD-2026-97556

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files...

CVE-2026-85964

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to a path traversal vulnerability in the Query Console . An authenticated user can provide unsafe path values to a privileged filesystem helper , potentially leading to the disclosure of arbitrary server f...

CVE-2023-32315

CVE-2023-32315 Openfire's administrative console the Admin Console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environmentin an already configured Openfi...

EUVD-2026-97674

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's...

CVE-2026-85960

Progress MarkLogic Server (12.x before 12.1.0 and 11.x before 11.3.7) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the Query Console due to the use of predictable CSRF tokens. A remote attacker could trick an authenticated user into visiting a malicious page to submit unauthorized...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2023-33246-Copy

1. Reference Learning CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Local Environment Setup 2.1 Download Image docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Start broker, namesrv, console Start namesrv docker run -dit -p 9876:9876 -p...

CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server Authentication Bypass Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0and 14.1.1.0.0. Easily exploitable vulnerability...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2024-28999

CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...