CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat has a vulnerability in the CGI Servlet which ca...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch By Edmonds Commerce This CVE relates to a CSRF vulnerability in the Adobe Flex .swf files used by Magento. You can find more information regarding the CVE here: Peter O'Callaghan - Magento CSRF vulnerability via Adobe Flex Minded Security - The old is new, again...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

CVE-2024-23897

PoC para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 o anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema. En primer lugar, comprobamos la versión de Jenkins para asegurarnos de que sea vulnerable: A continuación, podremos utilizar el exploit:...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denial Of Services DoS Description In this bug, a crash is addressed which is manifested when we open two large size text files first.txt & second.txt as input to SumatraPDF 32 bit. Run the following command, or you can manually open the both files in...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Sample EVTX files are in the .\evtx directory Note If your antivirus freaks out after...

whatsapp-media-decrypt

WhatsApp Media Decrypt A recent high-profile forensic investigation reported that “due to end-to-end encryption employed by WhatsApp, it is virtually impossible to decrypt the contents of the downloader .enc file to determine if it contained any malicious code in addition to the delivered video.”...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

CVE-2026-108745 CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a shared folder. Attackers can guess table and column names and enumerate second-resolution timestamps to download victims...

EUVD-2026-96910

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a shared folder. Attackers can guess table and column names and enumerate second-resolution timestamps to download victims...

CVE-2026-108745

CloudBeaver versions up to and including 25.3.5 are affected by a missing authorization vulnerability in the WebSQLResultServlet . This flaw allows any web session holder to access and read other users' LOB export files stored in a shared folder. An attacker can exploit this by guessing table and...

CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...

glasgo

Glasgo Static Analysis Tool This project's official repository has been moved to Github-ttarvis/glasgo. Project This is a static analysis tool written in Go for Go code. It will find security and some correctness issues that may have a security implication. Compiling To compile the tool, be sure ...

retire.js

Retire.js Retire Status What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now ...

claudleak

claudleak Escanea repositorios públicos de GitHub en busca de credenciales filtradas en archivos de configuración de herramientas de codificación de IA .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Utiliza TruffleHog para la detección de secretos. Ejemplo de directorio...