Umbra

This is the repo for Umbra browser dustribution. Umbra source code is not found here, we build umbra with a script named fern.js Out build system can be found here:https://github.com/openconstruct/user-agent-desktop Umbra is an opnionated privacy browser based on Mozilla Firefox ESR. All telemetr...

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

CVE-2021-22911-rust

CVE-2021-22911 A rust proof of concept for this CVE. Used as part of https://tryhackme.com/room/rocket, a CTF boot to root on the TryHackMe learning platform. To use, update the constants in main.rs and run, and it should work straight off. Requires that you have the admin email address and...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift भेद्यता टूलकिट CVE-2026-42945 की स्कैनिंग, पैचिंग और परीक्षण के लिए व्यापक टूलकिट - nginx में एक गंभीर RCE भेद्यता विषय-सूची अवलोकन CVE विवरण विशेषताएँ टूलकिट घटक आवश्यकताएँ स्थापना उपयोग कार्यप्रवाह उदाहरण सुरक्षा संबंधी विचार समस्या निवारण योगदान अवलोकन यह टूलकिट...

ibmsecurity

IBM सैंपल कोड इस रिपॉजिटरी में IBM सिक्योरिटी ऐप्लायंस को उनके संबंधित REST APIs का उपयोग करके प्रबंधित करने के लिए Python कोड शामिल है। ISAM ऐप्लायंस के लिए कोड सबसे परिपक्व है। ISDS ऐप्लायंस के लिए कोड विकास के अधीन है। ISVG ऐप्लायंस के लिए कोड बिल्कुल नया है केवल 10.0.1.0 और उससे ऊपर के साथ...

CVE-2024-8381

CVE-2024-8381 A SpiderMonkey Interpreter Type Confusion Bug. This repository contains analyses in markdown and slide forms, including root cause, PoC, and exploit. Unfortunately, due to nature of this bug, exploit is only applicable when ASLR is disabled. Slides: Slides.pdf Analysis: Analysis.md...

Overflow-Demo-CVE-2017-11882

Overflow-Demo-CVE-2017-11882 عرض توضيحي بسيط لتجاوز سعة الذاكرة عبر نسخ نص باستخدام strcpy، مثل استغلال CVE-2017-11882 البناء البناء باستخدام Visual Studio 2017 الإصدار 2019 يعمل أيضًا، بينما الإصدار 2015 لا يعمل. إعدادات المشروع root@kitploit: Project setting: c/c++ Optimization Optimization:...

CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

relayer

Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...

CVE-2026-13157

CVE-2026-13157 Theme Demo Import false during upload processing. An authenticated user possessing import capabilities—such as a default site administrator or a non-super-admin site administrator in a WordPress Multisite architecture—can bypass file restriction enforcement to upload arbitrary...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-85513

StackStorm st2 up to 3.9.0 is vulnerable to improper privilege management in the NoOp RBAC backend . The flaw resides in the function assert_user_is_admin_if_user_query_param_is_provided within st2api/controllers/v1/actionexecutions.py, where manipulation of the User query parameter allows a remo...

EUVD-2026-70599

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

skeleton

Skeleton 하지만 Peloton처럼 발음 Peloton Bike의 CVE-2021-0326에 대한 Zero-Click RCE 익스플로잇 그리고 패치되지 않은 다른 모든 Android 기기에서도 PoC는 ASLR 비활성화가 필요합니다. 관련 블로그 게시물: https://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device/...

CVE-2026-14663

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

CVE-2021-41773

CVE-2021-41773 This is a simple poc for Apache Path Traversal Vulnerability Vulnerable versions: Apache/2.4.49 Apache/2.4.50 with modcgi disabled...

l4j-fp1

log4shell false positive This is a simple web project with a sanitised log4shell vulnerability. For an unsanitised version, see https://github.com/scabench/l4j-tp1/. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...