CrushFTP-AS2-Bypass-Research-CVE-2025-54309

CrushFTP AS2 Authentication Bypass Research ⚠️ IMPORTANT: This vulnerability has been patched by CrushFTP as of November 2025. This research is published for educational and defensive purposes only. 📝 NOTE: This research is based on vulnerability patterns similar to CVE-2025-54309. The exact CVE...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

CVE-2024-49019-rayng

Exploiting CVE-2024-49019: Certificate Authority Privilege Escalation Overview CVE-2024-49019 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide demonstrates how to exploit this...

CVE-2025-31161

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This Python script exploits CVE-2025-31161, an authentication bypass vulnerability in CrushFTP, allowing unauthenticated attackers to retrieve the user list from the getUserList API endpoint. Features Authentication bypass via CrushAuth and...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2024-35469

CVE-2024-35469 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affected...

DockerSpy

DockerSpy DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more. What is Docker? Docker is an open-source platform that automates the deployment, scaling, and management of applications using containerization...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit Serverless Framework MCP Server CVE-2025-69256 Base Score: 9.4/10 → CTT Enhanced Score: 9.9/10 A critical command injection vulnerability in Serverless Framework's MCP Model Context Protocol server enhanced with CTT temporal...

CVE-2019-25137-Version-Research

CVE-2019-25137 Affected Version Research CVE-2019-25137 Overview CVE-2019-25137 is a XSLT injection vulnerability in Umbraco CMS. The vulnerability is present in the XSLT Extensive Stylesheet Language Transformations Visualizer webpage. The vulnerable URI for this webpage is...

ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

nano

nano Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient. Put it on watch maybe, I will continue to upload more webshells in here. Nano ?=$GETp==&&$GETf; Features 35 bytes in size Can't be detected by static code scanners Supports authentication Usage...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of NPS and Callhome. Vulnerability Details CVEID:CVE-2026-1965 DESCRIPTION: libcurl can in some circumstances reuse the wrong connection when asked to do an...