KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...

asf__commons-text_CVE-2022-42889_1-9

Apache Commons Text Apache Commons Text is a library focused on algorithms working on strings. Documentation More information can be found on the Apache Commons Text homepage. The Javadoc can be browsed. Questions related to the usage of Apache Commons Text should be posted to the user mailing...

Moderate: Red Hat Security Advisory: perl security update

An update for perl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: Red Hat Security Advisory: libkcapi security, bug fix, and enhancement update

An update for libkcapi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...

CVE-2024-29855

CVE-2024-29855 Veeam Recovery Orchestrator Authentication Bypass CVE-2024-29855 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Veeam published a CVSS 9 advisory for a authentication bypas...

cve-2025-24813_poc

cve-2025-24813poc cve-2025-24813 Proof-of-Concept Script Affected Versions 9.0.0.M1 = tomcat = 9.0.98 10.1.0-M1 = tomcat = 10.1.34 11.0.0-M1 = tomcat = 11.0.2 Detection Method root@kitploit: python .\CVE-2025-24813-poc.py -u url Disclaimer This script is intended for legitimate security research...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 Security Research Statement This project is intended solely for security research and educational purposes. Using this tool for unauthorized testing is illegal. The author is not responsible for any misuse or damage. 📋 Overview CVE-2024-31317 is a critical security...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

Important: Red Hat Security Advisory: image-builder security update

An update for image-builder is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

macsurf

The modern web, on a 25-year-old Mac. MacSurf is a web browser for Classic Mac OS 9 PowerPC. CSS3, ES5 JavaScript, and PNGs with alpha — running on a G3 iMac. MacSurf is a full-time project. If it brought your old Mac back to the web, every dollar helps keep development going. Also follow the...

Linux-Kodachi

Overview Login Credentials Terminal Server & Desktop XFCE | Username: kodachi | Password: Security4All Kodachi 9 is Fully Functional Kodachi 9 development is complete and the platform is fully functional. Every component — standalone binaries, terminal server version, desktop edition Debian XFCE,...

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...

CVE-2020-0022

CVE-2020-0022 Many thanks to Insinuator for their amazing blog post and code! Results All the steps mentioned in the insinuator post have been completed, and more. These are a lot of steps to put in a README.md file, so feel free to check out the post from Insinuator mentioned above. The exploit ...

cve-2023-42413

cve-2023-42413 ecology9sql...

spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...

spring-RCE-CVE-2022-22965

Vulnerability Overview Recently, Spring released a major CVE vulnerability. The CVE information states: "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as ...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...