Curveball

Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...

CVE-2023-34468

CVE-2023-34468 — Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

sniffly

Sniffly2 Sniffly2 es una variante de Sniffly que abusa de las cabeceras HTTP Strict Transport Security y de la API de Performance Timing para olfatear tu historial de navegación en navegadores basados en Chromium. Demo Visita http://diracdeltas.github.io/sniffly en Chrome/Chromium/Brave/etc. con...

ruler

Introducción Ruler es una herramienta que te permite interactuar con servidores Exchange de forma remota, a través del protocolo MAPI/HTTP o RPC/HTTP. El objetivo principal es abusar de las características del lado del cliente de Outlook y obtener una shell de forma remota. Todos los detalles sob...

CVE-2025-8110-Gogs-RCE-Exploit

Exploit RCE de CVE-2025-8110 en Gogs Un exploit automatizado en Python para CVE-2025-8110 en Gogs. Esta vulnerabilidad permite la Ejecución Remota de Código RCE abusando de la API PutContents, que no valida si una ruta de archivo es un enlace simbólico. Sobrescribiendo el archivo interno...

StickyExim

StickyExim An Email HoneyPot Features Easy to deploy. The install scripts does all the work. Abuse report are atomaticlly created and sent to the attacking IP owner. Abuse reports are stored with a hash at time of creation incase needed later. Requirements Domain names. One real domain you use fo...

CVE-2026-19032

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URIvalue and then to Path.ofuri. When that throws...

details-for-CVE-2022-46505

details-for-CVE-2022-46505 Error de reanudación de sesión en MatrixSSL 1. Descripción del error Un problema en MatrixSSL 4.5.1-open y anteriores provoca un fallo al verificar de forma segura el campo SessionID, resultando en el uso indebido de un MasterSecret todo ceros que puede descifrar datos...

CVE-2024-21413

CVE-2024-21413 Este script de Python se utiliza para abusar de la CVE-2024-21413 denominada «MonikerLink». Sala de TryHackMe: MonikerLink Suposiciones Este PoC ha sido creado para un entorno de laboratorio, lo que significa que el servidor debe configurarse con un ajuste específico es decir, la...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "Si se explota, la vulnerabilidad de seguimiento de enlaces podría permitir a atacantes remotos que hayan obtenido acceso d...

CVE-2020-14974

CVE-2020-14974 A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver IObitUnlocker.sys, providing ability to unlock, delete, rename, copy, and move running files as a low privileged user. Resources...

dtrace-memaccess_cve-2020-27949

Reading and writing memory of other processes using fasttrap The /dev/fasttrap device for creating trap nodes in user-space processes for the pid and objc providers has the permissions 666. In contrast to /dev/dtrace, which is also 666, fasttrap lacks a permission check. This allows any process t...

CVE-2026-31802

🛡️ CVE-2026-31802 - Visor Simple de Prueba de Concepto 📋 Acerca de CVE-2026-31802 Este repositorio proporciona una prueba de concepto PoC y un informe detallado para CVE-2026-31802. El problema es una vulnerabilidad de seguridad en el paquete npm tar. Permite a los atacantes engañar al software...

Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run...

Malicious code in pyservercheck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f01e2954dde5faac23074d02bb989f22d0dcb78be82c1c4417531fef8b859 The package ships a bundled Node script pyservercheck/js/main.js whose visible top half is a healthcheck stub matching the README, followed by a long...

MAL-2026-15603 Malicious code in pyservercheck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f01e2954dde5faac23074d02bb989f22d0dcb78be82c1c4417531fef8b859 The package ships a bundled Node script pyservercheck/js/main.js whose visible top half is a healthcheck stub matching the README, followed by a long...

CVE-2026-37073

CVE-2026-37073 Control de acceso incorrecto en /vfm-admin/ajax/sendfiles.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enviar correos electrónicos desde el servidor SMPT configurado en la aplicación mediante una solicitud POST al endpoint con los parámetros y...

CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

CVE-2026-20841

CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...