dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

Alibab-Nacos-Unauthorized-Login

Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.1.0.Nacos users use the default JWT key to cause an unauthorized access vulnerability. Through this vulnerability, attackers can bypass user name and password authentication and directly log in to the Nacos user Vuln Product...

MAGNOLIA-8348

MAGNOLIA-8348: FreeMarker Restriction Bypass 3 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.17 and below allows attackers to bypass security restrictions and execute arbitrary code, read/write/move/copy/delete arbitrary files or launch DoS attacks via a crafted FreeMarke...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

EUVD-2026-70906

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

CVE-2026-79630

The WPFunnels WordPress plugin prior to 3.13.0 contains an unauthenticated price manipulation vulnerability in its checkout order-bump feature. The plugin fails to verify that the product ID submitted via an order bump matches the product for which the bump's discount was configured. An unauthent...

EUVD-2025-210844

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine A specialized Python framework that executes unauthenticated remote code execution via the 9Router Model Context Protocol MCP bridge by deploying a 33-layer temporal phase cascade, Riemann-Hadamard dispersion, and an 11 ns wedge filter to bypass...

AMSI-patches-learned-till-now

AMSI-patches-learned-till-now I have documented all of the AMSI patches that I learned till now ❗ My AMSI patch Learning till now. Doesn't belong to my Company's Asset! DISCLAIMER: This code is not meant to be Evasive till now! Only a Conceptual Approach. Links: 1...

CVE-2026-8181

| Authentication Required 💥 CVE-2026-8181 - Burst Statistics Authentication Bypass Unauthenticated Privilege Escalation via MainWP Authentication Bypass 👨‍💻 Author !0xTerrorhttps://assets.kitploit.com/production/public/readmes/50604/f036bd5517ab1ec023381e336e314b53384b618d5a934600f6128...

poc_exploit_paxton_license

POC exploit for keygenerator for Paxton NET2 software This POC generates a valid licensefile to use the Paxton NET2 API...

cve-2024-0012-poc

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to access the management web interface over the network, obtain PAN-OS administrator privileges, and thereby perform administrativ...

goop

goop Raspador de Búsqueda de Google Nota: Ya no funciona. El equipo de Google me dijo que no era un problema legítimo cuando lo reporté, pero ahora simplemente lo arreglaron silenciosamente. Contenido Introducción ¿Cómo funciona? Uso Instalación Ejemplo Legal y Descargo de Responsabilidad...

CVE-2026-45034

🧨 PHPSpreadsheet Phar Deserialization Exploit BypassprohibitWrappers + Remote Code Execution RCE on phpoffice/phpspreadsheet This repository provides a proof-of-concept PoC exploit for a critical vulnerability in the popular PHP library PHPSpreadsheet. The attack abuses the phar:// wrapper to...

widevine-l3-decryptor

Advertencia de deprecación Este repositorio solía contener código para eludir el DRM L3 de Widevine en Chrome en máquinas Windows. Ya no funciona a partir del 31 de mayo de 2021, pero puedes leer el informe de reversión. Actualización Google emitió una solicitud de eliminación por DMCA contra la...

CVE-2026-78682

A flaw was found in NLTK. When an HTTP proxy is configured, a server-side request forgery SSRF vulnerability exists in the nltk.pathsec.urlopen function. An attacker can exploit this by providing a seemingly valid public URL, which the proxy then forwards to an internal service without proper...

haxx

haxx Ejecución de código haxx sin ataduras ni sandbox como root en iOS 14 - iOS 14.8.1. Basado en CoreTrustDemo. Tenga en cuenta que los certificados no están sujetos a derechos de autor. Uso Nota: requiere macOS + jailbreak existente Puesta en marcha Este método funciona en 14.0-14.6. 14.7...

V8-sbx-bypass-collection

V8 Sandbox escape/bypass/violation and VR collection A collection of links related to V8 sandbox VR and exploitation Contents IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, V8 Sandbox escape due to type tags in ExternalPointerTable being too coarse...

ZeroHVCI

ZeroHVCI - Defeating HVCI without admin privileges or a kernel driver ZeroHVCI accomplishes arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity HVCI protected environments calling without admin permissions or kernel drivers. Features Full non-privileged kernel...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...