frida-medit

frida-medit cross-platform cui-based process memory analyzer. Memory Scanner ? Please Input a command. find ? Please Input a data type. 'dword' ? Please Input a value. 1000 progress: 100%|█████████████████████████████████████████████████████████████████████████████████████████████| HIT COUNT:3834...

CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Limited Remote File Read/Include Vulnerable Endpoints: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2021-2109

Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Exploit CVE-2025-47812 📌 Credit : Vulnerability discovered by Julien @MrTuxracer. This PoC implementation is based on their original research. This repository hosts a Python exploit for the Wing FTP Server Remote Code Execution RCE...

CVE-2026-108953

The software mac-shell-mcp before version 2.0.0 is vulnerable to an OS command injection (CWE-78) within the execute_command arguments. This flaw allows MCP clients to bypass the command whitelist by injecting shell metacharacters (e.g., ;) into arguments of safe commands like pwd. Successful exp...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has alerted administrators about a critical vulnerability in Confluence. Exploiting this issue can lead to data loss, so developers urge you to install patches as soon as possible. It is noted that...

cve-2018-5740

CVE-2018-5740 PoC Named, which is received response from legimate authoritative server, is crashed by CVE-2018-5740. FILES named.conf: BIND configration file for authoritative server. example.com: zone file for authoritative server. named-full-resolver.conf: BIND configration file for victim...

cve-2017-7269

fixed msf module for cve-2017-7269 fix not work when length of physical path not equal to 19,or has a host binding. add options: PhysicalPathLength,HttpHost for test: host phyiscal path: c:\inetpub\ , length=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module...

CVE-2022-21907

CVE-2022-21907 A REAL DoS exploit for CVE-2022-21907 It supports IPv4/IPv6/HTTP/HTTPS Affect - Windows - 10 Version 1809 for 32-bit Systems - 10 Version 1809 for x64-based Systems - 10 Version 1809 for ARM64-based Systems - 10 Version 21H1 for 32-bit Systems - 10 Version 21H1 for x64-based System...

CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

CVE-2025-55182-React-19.2.0

Exploitation Steps: 1. Download all files in this repository 2. Extract file.zip and name it rh-test 3. Run using npm run dev or yarn dev or pnpm dev or bun dev. 4. Open http://localhost:3000 in browser 5. Open a new terminal and run the command python3 react-exp.py http://localhost:3000 Follow...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

POC-CVE-2021-41773

POC-CVE-2021-41773 this is simple script for the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. Usage: Check 1 ip Check from file...

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP OAuth Server versions = 6.4.0...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities 1 Exploit-db publication at https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities 2 Exploit-db publication at...

CVE-2016-4971

CVE-2016-4971 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. See the post on my blog for some detail. Usage On your server, node wget.js On your test computer, wget http://url.to.your/server...