CVE-2023-35078

CVE-2023-35078 This script ethically checks for the presence of cve-2023-35078 via requesting the /ping endpoint from the Ivanti EPMM API. /ping simply responds with the VSP version, rather than attemping to pull device or admin data. Usage: ./CVE-2023-35078 This script assumes https connections...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — PoC Educativo -6f42c1 Solo para pruebas autorizadas y aprendizaje defensivo. Este repositorio está destinado a entornos de laboratorio controlados por ejemplo, configuraciones estilo CTF/HTB donde usted es propietario del objetivo o tienepermiso...

firewall

🛡️ Spring4Shell Firewall Defense – Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed through Forage in August 2025. It simulates a real-world incident involving the Spring4Shell CVE-2022-22965 vulnerability and demonstrates how a custom firewall...

CVE-2024-39722

Ollama CVE-2024-39722 Exploit Tool This tool is designed to exploit CVE-2024-39722, a model existence disclosure vulnerability in Ollama versions up to and including 0.1.45. It allows users to check if an Ollama server is vulnerable and attempt to discover existing models on the server...

BADministration

BADministration ¿Qué es BADministration? BADministration es una herramienta que interactúa con aplicaciones de gestión o administración desde un punto de vista ofensivo. Intenta proporcionar al personal de seguridad ofensiva una herramienta con la capacidad de identificar y aprovechar estas...

CVE-2025-46204

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...

CVE-2025-46203

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this vulnerability can lead to...

CVE-2025-55462

CVE-2025-55462 Vulnerability Summary A Cross-Origin Resource Sharing CORS misconfiguration was identified in Eramba Community and Enterprise Editions v3.26.0. The application reflects attacker-controlled Origin headers in the Access-Control-Allow-Origin response header on the /system-api/login...

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit APK file that's...

CVE-2021-43798

CVE-2021-43798 Grafana-Lectura-Arbitraria-de-Archivos 8.0.0 8.3.0 Una vulnerabilidad en Grafana CVE-2021-43798 versiones 8.0.0 8.3.0 que permite a un atacante no autenticado leer archivos arbitrarios del servidor aprovechando un path traversal dirigido a la ruta /public/plugins/ para acceder a...

CVE-2025-61148

CVE-2025-61148 The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized to view it. By modifying the recno parameter in the API request, an attacker can access the receipts of other users. CVE-2025-61148:...

CVE-2025-52488

Exploit de Divulgación de Hash NTLM por Normalización de Rutas Unicode en DNN CVE-2025-52488 Resumen Este exploit apunta a una vulnerabilidad en DNN anteriormente DotNetNuke versiones 6.0.0 hasta antes de 10.0.1 que permite a los atacantes divulgar hashes NTLM mediante ataques de normalización de...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Exploitation steps for CVE-2020-27358 and CVE-2020-27359 CVE-2020-27358 An issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature that allows users to export their conversation threads as CSV allows non-privileged users to export o...

Ivanti-Connect-Around-Scan

Comprobador de Vulnerabilidad Ivanti Connect Around Comprobador de Vulnerabilidad Ivanti Connect Around Resumen Características Tipos de Comprobaciones WEB ACCESS SYSTEM INFO BYPASS DETECTED Explicación de los Tipos de Estado Primeros Pasos Requisitos Uso Argumentos Especificación del Objetivo...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...

eWeLink-QR-Code

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...

CVE-2023-31702

CVE-2023-31702 — Inyección SQL en la Consola de Administración de eScan Autenticada Resumen CVE-2023-31702 es una vulnerabilidad de Inyección SQL autenticada descubierta en MicroWorld Technologies eScan Management Console versión 14.0.1400.2281. La vulnerabilidad existe en el endpoint...

CVE-2023-34843

CVE-2023-34843 Disclosure traggo/server version 0.3.0 is vulnerable to directory traversal. Steps to reproduce: 1. Setup traggo/server on your endpoint/server. https://traggo.net/install/ 2. Make a GET request to the following URL. curl -X GET...