CVE-2026-12513

CVE-2026-12513: Shared Files 1.7.68 — Unauthenticated Arbitrary File Deletion via Path Traversal 📖 Advisory Overview CVE-2026-12513 is an unauthenticated Arbitrary File Deletion vulnerability via Path Traversal affecting the Shared Files and Shared Files Pro WordPress plugins before version 1.7.6...

CVE-2025-8088

CVE-2025-8088 Herramienta Python para manejo seguro de archivos, conciencia de path traversal y extracción segura. Inspirado en CVE-2025-8088. Safe Archive Handling PoC Herramienta educativa de equipo azul inspirada en problemas de path traversal como CVE-2025-8088. Este script ayuda a detectar y...

mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

CVE-2022-24716-2

CVE-2022-24716 Icinga Web 2 es una interfaz web de monitoreo de código abierto, framework e interfaz de línea de comandos. Los usuarios no autenticados pueden filtrar el contenido de archivos locales del sistema accesibles por el usuario desde el servidor web, incluidos los archivos de...

CVE-2026-41091-PoC-Exploit

CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this software. Users a...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Resumen R1Soft Server Backup Manager utiliza el framework ZK como su framework principal. Su seguridad requiere que todas las partes de proyectos Web3 presten más atención a las vulnerabilidades de seguridad de diversas infraestructuras Web3 y las parcheen a tiempo para evitar...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

CVE-2017-8464-exp-generator

CVE-2017-8464-exp-generator esta herramienta puede generar un exploit para CVE-2017-8486, está desarrollada en Python Usage: CVE-2017-8464.py dllname luego se generarán 26 archivos llamados A.lnk, B.lnk, ...., Z.lnk luego solo necesita poner el archivo dll en cualquiera de los discos A:/, B:/,...

apkvuln

ApkVuln \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make use of regular...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2019-0232

CVE-2019-0232 Exploit Ejecución remota de código RCE en el Servlet CGI – Apache Tomcat en Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat tiene una vulnerabilidad en el Servlet...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

LazySign

LazySign Create fake certs for binaries using windows binaries and the power of bat files Over the years, several cool tools have been released that are capeable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch Por Edmonds Commerce Este CVE se relaciona con una vulnerabilidad CSRF en los archivos .swf de Adobe Flex utilizados por Magento. Puede encontrar más información sobre el CVE aquí: Peter O'Callaghan - Vulnerabilidad CSRF de Magento a través de Adobe Flex Minded Security ...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

CVE-2024-23897

PoC para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 o anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema. En primer lugar, comprobamos la versión de Jenkins para asegurarnos de que sea vulnerable: A continuación, podremos utilizar el exploit:...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denegación de Servicio DoS Descripción En este error, se aborda un fallo que se manifiesta cuando abrimos dos archivos de texto grandes first.txt & second.txt como entrada en SumatraPDF de 32 bits. Ejecute el siguiente comando, o puede abrir manualmente amb...