18015 matches found
CVE-2026-42271-PoC
CVE-2026-42271 — LiteLLM Authenticated Command Injection via MCP stdio Test Endpoints LiteLLM POST /mcp-rest/test/connection & POST /mcp-rest/test/tools/list — Authenticated command injection via MCP stdio transport. Any valid API key can execute arbitrary OS commands as root in default Docker...
wyze-bulb-color-pwned
wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
C-test-2
This repository does not have a README...
test-fuzz
test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...
CVE-2021-44228-Test-Server
CVE-2021-44228-Test-Server A small server for verifing if a given java program is succeptibel to CVE-2021-44228 Usage Build the program using go build -o listener.exe. This should give you a small executable for your platform. Use the Go cross compile feature if you need the executable for anothe...
CVE-2026-42203
LiteLLM CVE-2026-42203 PoC Usage Instructions This document explains how to start a local LiteLLM environment and run CVE-2026-42203.py to verify the /prompts/test SSTI vulnerability. Only use in a local experimental environment that you are authorized to test. Do not point the script at...
CVE-2022-42889
CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.9 which is vulnerable to CVE-2022-42889. Steps to reproduce the exploit. Steps to reproduce the exploit in a repo. Copy DemoApplication.java to your repo. Run the main method, with default...
fuzzowski
Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas La idea es ser el Fuzzer de Protocolos de Red que queramos usar. El objetivo de esta herramienta es ayudar durante todo el proces...
CVE-2020-8888
CVE-2020-8888 test...
Penetration-Test
Penetration-Test Full penetration test report against IP Ubuntu VM. Attack chain: directory enumeration → backup file discovery → password cracking → CMS file upload → reverse shell → kernel privilege escalation Dirty Pipe, CVE-2022-0847. Repository Structure /report – Final penetration test repo...
CVE-2022-23773-Reproduce
CVE-2022-23773-Reproduce Execute the demo git clone https://github.com/Liuyushung/CVE-2022-23773-Reproduce.git cd CVE-2022-23773-Reproduce/testenv/ ./execmain.sh...
CVE-2023-52709-PoC
Proof of Concept for CVE 2023-52709 "TI Bluetooth stack can fail to generate a resolvable Random Private Address RPA leading to DoS for already bonded peer devices" CVE 2023-52709 Summary When running Defensics test case SMP legacy 1001 with loop mode on DUT configured as resolvable private...
metasploit-pentest-report
Authorized Penetration Test: Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable VM built for security...
atomic-red-team
Atomic Red Team Atomic Red Team™ es una biblioteca de pruebas asociadas al framework MITRE ATT&CK®. Los equipos de seguridad pueden usar Atomic Red Team para probar sus entornos de manera rápida, portable y reproducible. Comenzar Puede ejecutar pruebas atómicas directamente desde la línea de...
sqlancer
SQLancer es una herramienta para probar automáticamente Sistemas de Gestión de Bases de Datos DBMS con el fin de encontrar errores en su implementación. Es decir, encuentra errores en el código de la implementación del DBMS, no en las consultas escritas por el usuario. SQLancer ha encontrado...
CVE-2024-51430
CVE-2024-51430 Vulnerability Type Cross-Site Scripting XSS Description Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component Vendor of...
vulnerability-poc
Vulnerability PoC Repository Curated Proof-of-Concept PoC code, test labs, and prevention rules for high-severity CVEs — built for authorized security testing, penetration testing, CTF challenges, and security research. Maintained by the SeekersLab team. Every entry ships with detection-only PoC...