AERA

AERA: Autonomous Exploit Research Assistant !Python 3.11+...

CVE-2026-53576

Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit • Vulnerability Details • Impact • Remediation ⚠️ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...

cve-2025-55182

CVE-2025-55182 - React Server Components 远程代码执行漏洞利用 用于 CVE-2025-55182 的 Python CLI 利用工具，这是一个通过 react-server-dom-webpack 利用 React Server Components 的严重 RCE 漏洞。 基于： ejpir/CVE-2025-55182-poc 构建并运行易受攻击的容器 docker build -t cve-2025-55182:lab . docker run -d -p 3000:3000 --name cve-2025-55182-vuln...

Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

MAL-2026-17469 Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

CVE-2025-68116

CVE-2025-68116 Autor: @x0root Vulnerabilidad: Cross-Site Scripting XSS Almacenado mediante subidas renderizables por el navegador SVG / HTML Software afectado: FileRise Nota: GHSA-qrcv-vjvf-fr29 introdujo una mitigación que impedía que los...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Panel Pterodactyl - Ejecución Remota de Código No Autenticada RCE 🔎 Resumen CVE‑2025‑49132 es una vulnerabilidad crítica de Ejecución Remota de Código que afecta a Pterodactyl Panel --cmd "" --path Ejemplos python3 CVE-2025-49132-dbs.py --target victim.com --cmd "whoami" python3...

CVE-2025-46181-XSS

CVE-2025-46181 - 在线预约挂号系统中的反射型 XSS 漏洞 CVE-ID ：CVE-2025-46181 发现者 ：Shemkumar P（shemkumar.github.io） 漏洞类型 ：反射型跨站脚本（XSS） 严重性 ：中危 状态 ：已披露，MITRE 已分配 CVE ✨ 描述 某公开在线预约挂号系统（v1.0）中存在反射型跨站脚本（XSS）漏洞，具体位于处理预约确认的页面。由于一个 GET 参数未能正确过滤输入，攻击者可在受害者的浏览器中注入并执行 JavaScript 代码。 📍 漏洞参数 GET /confirmapp.php?slotdt=...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python para CVE-2024-28397, una vulnerabilidad de escape de sandbox en el intérprete de JavaScript Js2Py para Python. Cuando la aplicación objetivo evalúa código JS no confiable mediante Js2Py, un...

gitlab-cve-2026-85706-ioc

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit GitLab CE/EE Repository Commits API Unauthenticated Path Traversal CVSS 3.1: 10.0, Critical Status: Actively exploited in the wild · Listed in CISA KEV 2026-09-11, due 2026-09-14 · Patched by GitLab 2026-09-10 A free,...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC 用法 python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

CVE-2026-105118

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

CVE-2026-105120

OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every realm. Attackers holding delegated RealmAdmin privileges can supply a queryFilter naming another realm to disclose usernames...

CVE-2026-48908-by-yora

🔐 Escáner CVE-2026-48908 y PoC Seguro Joomla SP Page Builder — Carga de Archivos No Autenticada / RCE Potencial Desarrollado poryora 📌 Acerca de Este proyecto es una herramienta de investigación de seguridad y detección de vulnerabilidades desarrollada por yora para ayudar a identificar...

CVE-2023-38831-KQL

CVE-2023-38831 - WinRAR 文件扩展名欺骗漏洞 描述 网络犯罪分子利用了一个可让他们伪造文件扩展名的漏洞。这意味着他们可以在伪装成常见文件类型（如 .jpg、.txt 等）的压缩包中隐藏恶意脚本的启动。该漏洞已同时上报给 RARLAB 和 MITRE Corporation，后者为其分配了标识符 CVE-2023-38831。值得注意的是，网络犯罪分子已使用 ZIP 压缩包投递多种恶意软件家族，如 DarkMe、GuLoader 和 Remcos RAT。 影响 ： 通过面向交易者的专业论坛分发，目前已知有 130 台交易者的设备被感染。...

CVE-2023-43040

CVE-2023-43040 该仓库包含针对 RADOS Gateway RADOSGW 中发现的 CVE-2023-43040 漏洞的概念验证利用代码。该漏洞允许攻击者向指定访问密钥可访问的任何存储桶上传对象，可能导致未经授权的数据篡改或泄露。 $ pip install -r requirements.txt $ python CVE-2023-43040.py --accesskey 699GVXAYVZ5A3ZRYSCI0 --secretkey UZAHHNF3WzASPKCnDdQ8rCvAKaBvLlkZI2V8n7We --endpoint...

CVE-2019-2215

CVE-2019-2215 来源： https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 三星 S7 和 S7 Edge（内核 3.18.x）似乎不易受攻击（不过可能通过更多 PoC 调整后可行）。由于没有 root 设备，无法进一步验证。 三星 S3Neo+（LineageOS 内核 3.4.0）可能存在漏洞（仍在进行中） Kernel 3.4.0...

CVE-2023-47564

CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "Se ha informado de una vulnerabilidad de asignación incorrecta de permisos para un recurso crítico que afecta a Qsync Central. Si se explota,...