-Educational-PoC-CVE-2026-23520

CVE-2026-23520: Model Context Protocol MCP Connect RCE - PoC Educativo - Arcane DESCARGO DE RESPONSABILIDAD: Este repositorio y los scripts que contiene son estrictamente para fines educativos y académicos. La información aquí proporcionada está destinada a ayudar a investigadores de seguridad,...

POC_CVE-2026-35037

CVE-2026-35037 Ech0 SSRF Lab This repository contains a local, isolated reproduction lab for CVE-2026-35037, an unauthenticated SSRF vulnerability in Ech0's GET /api/website/title endpoint. The lab uses a controlled local evidence server instead of cloud metadata or third-party infrastructure...

CVE-2026-14382

CVE-2026-14382 Disparador binario Corrección de error root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 La causa raíz de esta vulnerabilidad parece ser similar a la de CVE-2025-6558. Según mi análisis...

cve-2022-1388-iveresk-command-shell

CVE-2022-1388 by 1vere$k with command shell Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 Also it's a complete rework with refactoring for PsychoSec work b...

CVE-2026-88533

CVE-2026-88533: Unauthenticated Arbitrary File Write → Root RCE in QAnything CVE ID : CVE-2026-88533 assigned by MITRE, record publication pending Product : QAnything by netease-youdao — open-source RAG / knowledge-base QA platform Affected : v1.4.x through v2.0.0 default branch qanything-v2,...

BOF_RunPe

BOFRunPE BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe is used - all output is captured via IAT hooking and redirected to the...

CVE-2026-44596

CVE-2026-44596 — YAMCS Sin Límite de Tasa en el Endpoint de Autenticación Resumen El endpoint de autenticación POST /auth/token en yamcs-core carece de cualquier forma de limitación de tasa, bloqueo de cuenta o estrangulamiento de intentos fallidos. Un atacante remoto no autenticado puede realiza...

VulnFanatic-NG

VulnFanatic-NG Investigación de vulnerabilidades asistida por LLM para Binary Ninja. VulnFanatic-NG añade un panel lateral que escanea el binario actual y pregunta a un LLM — un modelo alojado localmente compatible con OpenAI por defecto, o Anthropic Claude, Google Gemini, o Azure OpenAI ver...

scopeblind-gateway

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

CVE-2022-41876

CVE-2022-41876 - eZ Platform user information disclosure A vulnerability emerged in eZ Platform letting an unauthenticated user access every contributor password's hash. This PoC enumerates every possible GraphQL path leading to a 'User' object, and then requests these paths to retrieve users'...

SimpleRmiDiscoverer

SimpleRmiDiscoverer Simple JMX RMI scanning tool Full Code: https://github.com/marcin-wolak/SimpleRmiDiscoverer/blob/master/SimpleRmiDiscoverer.java The tool offers the following options for exposed Java JMX: Extracting JMX endpoint IP/Name and TCP port from RMI Registry with -d, --dumponly...

Package-Inferno

PackageInferno Blazingly simple, Docker‑first npm supply‑chain scanner. One compose file runs: Enumerator → builds the queue of packages Fetcher → downloads tarballs and optionally uploads to S3 Analyzer → static analysis + optional YARA Postgres → local DB for findings Streamlit Dashboard →...

OWASP-Subtractive-Hardening-Top-10

OWASP Subtractive Security Top 10 Project Overview The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths. Unlike traditional security guidance that focuses...

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

tealtiger

TealTiger SDK de Seguridad y Gobernanza de Agentes de IA Gobernanza determinista, protecciones, seguimiento de costos y gestión de políticas para aplicaciones LLM. Código abierto. TypeScript + Python. Funciona con cualquier proveedor...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

CVE-2025-29824

🔥 Exploit de Día Cero CVE-2025-29824 🔥 Bienvenido al oscuro corazón del ciberespacio, donde los límites éticos se doblan bajo el peso del conocimiento prohibido. Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-29824 , una vulnerabilidad de uso después de liberación UA...

oversight

Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...

TraceTree

TraceTree TraceTree Demo TraceTree cascade-analyzer es un organismo de seguridad autónomo diseñado para la era de los agentes. Va más allá del simple escaneo para convertirse en un ecosistema de detección robusto, endurecido y escalable. Como su mascota, la araña, TraceTree teje una red integral ...

datasploit

Resumen de la herramienta: Realiza OSINT en un dominio / correo electrónico / nombre de usuario / teléfono y encuentra información de diferentes fuentes. Correlaciona y colabora los resultados, mostrándolos de manera consolidada. Intenta encontrar credenciales, api-keys, tokens, subdominios,...