Exploit-Development

개발된 익스플로잇 이 저장소에는 제가 공개적으로 릴리스하는 모든 익스플로잇 또는 개념 증명PoC 코드가 포함됩니다. 또한 Metasploit 모듈과 포팅된 익스플로잇도 포함할 예정입니다. Metasploit 모듈 이 디렉토리에는 제가 개발한 모든 Metasploit 모듈이 포함됩니다. 이 디렉토리의 코드는 다른 디렉토리에 독립형 PoC로 존재할 수도 있습니다. 포팅된 익스플로잇 익스플로잇 공격은 해커로서 마스터하기 가장 어려운 기술 중 하나입니다. 이 디렉토리에는 제가 직접 발견한 것이 아니라 재현한 취약점이 포함됩니다. 공격...

cve-2015-1592

Эти файлы обсуждались в моём докладе на Houston Perl Mongers о теме "Вооружение уязвимостей сериализации Perl с помощью MetaSploit". Видео доклада, объясняющее эти файлы, доступно здесь: https://youtu.be/Gzx6KlqiIZE Файлы storable-.pl используются для генерации значений параметра 'config',...

EUVD-2026-88217

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-90979 Apache Karaf: LDAP filter injection in JAAS LDAP login modules

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

msf-auxiliarys

msf-auxiliarys metasploit 보조 포스트 모듈 모음입니다 Description 이 작업 디렉토리에는 제가 작성한 다양한 metasploit 보조 모듈이 포함되어 있으며, 공격 후post-exploitation 일반적인 작업을 돕기 위해 만들어졌습니다. Download/Install 1º - GitHub에서 모듈 다운로드 2º - 설명을 읽도록 모듈 편집 3º - 모듈을 metasploit 데이터베이스로 포팅 4º - metasploit 데이터베이스 다시 로드 .. service postgresql start...

CVE-2026-100750

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

EUVD-2026-88107

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750 Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750

The Modules Anywhere Joomla extension (versions 1.5.0 - 9.0.5 ) contains a vulnerability allowing Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The issue stems from a feature that allows additional attributes on a module tag to replace arbitrary parameters of the selected mo...

CVE-2026-100750 Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

sony-bravia-root-toolkit

sony-bravia-root-toolkit CVE-2019-2215 & DirtyCOW 익스플로잇 자동화 + 루팅 후 디블로트 + Sony BRAVIA KDL-43W800C용 Magisk 모듈...

CVE-2026-100909

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

dirty_frag_mitigation

dirtyfragmitigation 1. Bash-скрипт для смягчения уязвимости dirty frag в Linux CVE-2026-43500 2. Работает на всех платформах на основе Debian/Ubuntu Arch, т.е. Kali, ParrotSec, BlackArch 3. Добавлен флаг --check для запуска от имени обычного пользователя. Добавлена поддержка fragnesia, так как он...

Apache Karaf 4.4.11 JAAS LDAP Login Modules LDAP Filter Injection

Summary Karaf is a lightweight, powerful, and enterprise ready modulith runtime. It provides all the ecosystem and bootstrapping options you need for your applications. Description Apache Karaf's JAAS LDAP login module is affected by LDAP filter injection. The user and role LDAP search filters ar...

CVE-2026-100750: Server-Side Request Forgery (SSRF)

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2025-55182

CVE-2025-55182 Уязвимость удаленного выполнения кода в React Server Components CVE-2025-55182 и удаленное выполнение кода в Next.js CVE-2025-66478. Данная уязвимость в основном затрагивает функциональность Server Actions в пакете react-server-dom-webpack. Из-за отсутствия проверок безопасности пр...

CVE-2024-11003-POC

CVE-2024-11003-POC Описание Qualys обнаружила, что needrestart до версии 3.8 передаёт несанитизированные данные в библиотеку Modules::ScanDeps, которая ожидает безопасный ввод. Это может позволить локальному злоумышленнику выполнить произвольные команды оболочки. Пожалуйста, см. связанную...

OVSwrap-CVE-2026-64531-Mitigation-Tool

OVSwrap CVE-2026-64531 완화 도구 Open vSwitch 커널 모듈에 영향을 미치는 OVSwrap 취약점을 탐지하고 완화하는 간단한 스크립트입니다. 기능 취약한 Open vSwitch 모듈 탐지 모듈 로드 여부 확인 자동 로드 차단 모듈을 안전하게 제거 완화 상태 확인 KernelCare 정보 표시 설치 git clone https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool.git cd...