SMBGhost_CVE-2020-0796_checker

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

CVE-2019-12086

Documentation CVE-2019-12086 jackson unserialize Vulnerability Exploitation 1. Start a malicious MySQL server: python roguemysqlserver.py 2. Check mysql.log in the same directory: tail -f mysql.log 3. Send the following JSON to the vulnerable application:...

live-server-evil-crawler

Live Server Evil Crawler A GitHub Pages site for demonstrating the Live Server VSCode extension vulnerability CVE-2025-65717. Overview This tool demonstrates a vulnerability where Live Server allows requests from any origin, enabling malicious web pages to access the Live Server running on...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool es una herramienta de pruebas de penetración de código abierto que prueba la seguridad de las bases de datos Microsoft SQL de forma remota. Ejemplos de uso de MSDAT: Tiene una ba...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...

CVE-2022-22029-NFS-Server-

Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

CVE-2026-108578

A vulnerability exists in the Embedded Web Server component of Neterbit NW-431F 20250715 . Specifically, an unknown function within the /sms.json file allows for information disclosure . This vulnerability can be triggered via a remote attack . No remediation details or specific exploit informati...

CVE-2026-108578 Neterbit NW-431F Embedded Web Server sms.json information disclosure

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

EUVD-2026-96927

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

headerpwn

headerpwn Un fuzzer para analizar cómo responden los servidores a diferentes cabeceras HTTP. 🏗️ Instalación ⛏️ Uso 📡 Proxy de solicitudes HTTP Instalación Para instalar headerpwn, ejecuta el siguiente comando: go install github.com/devanshbatham/[email protected] Uso headerpwn te permite...

sak1to-shell

sak1to-shell Servidor c2 multi-hilo, multi-sistema/plataforma Linux/Windows y cliente de shell TCP inversa para Windows, ambos escritos en C. Compilando el cliente de shell TCP inversa con i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.ex...

CVE-2026-108753 Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...

EUVD-2026-96917

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

CVE-2026-108718 Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the longlivedaccesstoken scope and lure a user to an authorization link,...

CVE-2026-108718 Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the longlivedaccesstoken scope and lure a user to an authorization link,...

EUVD-2026-96992

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the longlivedaccesstoken scope and lure a user to an authorization link,...

CVE-2026-108718

The Rill platform (versions 0.77.0 through 0.90.5 ) contains a missing authorization vulnerability within the admin OAuth server . The flaw allows the server to issue authorization codes to dynamically registered clients without requiring explicit user consent. An attacker can register a maliciou...