CVE-2026-105400

A flaw in ImageMagick before version 7.1.2-31 allows a resource leak vulnerability. By submitting a specially crafted magick script , an attacker can cause the application to fail to properly close open file handles. Repeated execution of such a script can exhaust available system file descriptor...

CVE-2026-105400

Removed by vendor...

CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

CVE-2024-3094

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer This Bash script checks for vulnerable versions of xz-utils installed on your system and offers to replace them with a stable, uncompromised version. Requirements wget tar make sudo Usage 1. Ensure you have the required dependencies installed...

CVE-2023-52654

Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Automatically escalate privileges on Unix systems by exploiting misconfigured setuid/setgid binaries, capabilities, and sudo permissions...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

OpenSSL-Vulnerability-Detection-Script

OpenSSL-Vulnerability-Detection-Script This is an OpenSSL Vulnerability Detection Script for CVE-2022-2274...

Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

cve-2023-22515-exp

cve-2023-22515-exp Python exploit script for cve-2023-22515 Arguments: -h, --help show this help message and exit -H HOST, --host HOST Specify the URL -U USERNAME, --username USERNAME Specify the username -PW PASSWORD, --password PASSWORD Specify the password -E EMAIL, --email EMAIL Specify the...

CVE-2025-60656

CVE-2025-60656 - Stored Cross-Site Scripting XSS on Homepage | ---|--- Researchers| DotAdrien Severity| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Description A stored Cross-Site Scripting XSS vulnerability exists on the homepage via the "Recent Ads" module. The...

CVE-2025-60654

CVE-2025-60654 - Stored Cross-Site Scripting XSS in Ad Description | ---|--- Researchers| DotAdrien Severity| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag Description The ad description field is vulnerable to stored Cross-Site Scripting XSS. Although some security...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 MinIO Sensitive Information Leak Detection Script Usage go mod tidy go build main.go ./main -u 'http://example.com'...

rtf_exploit_extractor

rtfexploitextractor Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents usage: rtfexploitextract.py -h -o OUTFILE -d DECOY -l LENGTH -v inputfile inputfile exploit document to examine optional arguments: -h, --help show this help message and exit -o OUTFILE...

cve-2021-3157

cve-2021-3156 Script kiddie turns out to be me?...

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...

weblogicPoc

weblogicPoc Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883, ... Patch CVE-2020-2551 Updated original version https://github.com/Y4er/CVE-2020-2551.git to address the issue of being unable to directly probe servers on private addresses. CVE-2020-2555 Updated cve-2020-2555 exp,...

CVE-2020-19360

CVE-2020-19360 Fhem arbitrary file read poc FOFA search title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com single URL test python3 Fhem.py -f url.txt batch detection Tip After the scan is complete, a vulnerable.txt file with vulnerabilities will be...

heartbleed

Patrik Karlsson have implemented ssl-heartbleed and commited into svn.nmap.org. you can get it from https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. they have a discussion here: http://seclists.org/nmap-dev/2014/q2/22 . get more details from http://heartbleed.com Credit to author of ssltest....