RockyLinux 8 : ghostscript (RLSA-2026:83552)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83552 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

Nginx UI MCP Component Data Compromise

The vulnerabilities of the nginxconfigadd and nginxconfigmodify functions of the MCP component of the Nginx UI server involve bypassing authentication procedures by using an alternative path or channel. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity and...

HPE iLO 5 < 3.22 / iLO 6 < 1.79 / iLO 7 < 1.25.01 Multiple Vulnerabilities (HPESBHF05170)

The version of HPE Integrated Lights-Out iLO firmware on the remote host is iLO 5 prior to 3.22, iLO 6 prior to 1.79, or iLO 7 prior to 1.25.01. It is, therefore, affected by multiple vulnerabilities as referenced in the HPESBHF05170 advisory. A remote attacker can exploit these vulnerabilities t...

Linux Distros Unpatched Vulnerability : CVE-2026-70188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

CVE-2025-36041

CVE-2025-36041 IBM MQ SSL Bypass Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2025-36041 , a vulnerability in IBM MQ Message Queue that allows bypassing SSL certificate validation. By injecting a fake SSL certificate and using customized MQCONNX parameters, an...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

CVE-2025-8730

CVE-2025-8730 – Authentication Bypass in Belkin F9K1009/F9K1010 Author : Byte Reaper Description : This repository contains a exploit for CVE‑2025‑8730, a critical Authentication Bypass vulnerability affecting the web interface of Belkin F9K1009 and F9K1010 routers. The flaw lies in the session...

BadRentdrv2

BadRentdrv2 A vulnerable driver exploited by me BYOVD that is capable of terminating several EDRs and antivirus software in the market, rendering them ineffective, working for both x32 and x64. How does it work? Compile targeting the legacy x32 architecture for a wider attack range. In an elevate...

CVE-2023-20860

For studying CVE-2023-20860: Security Bypass With Un-Prefixed Double Wildcard Pattern Spring Framework 6.0.7 and 5.3.26 fix cve-2023-20860 and cve-2023-20861...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A proof-of-concept exploit...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operations and maintenance management panel that provides a graphical interface for deploying websites, managing servers,...

CVE-2026-92777

A potential vulnerability exists in some Lenovo Tablets that could allow an attacker with physical access to an unlocked device to bypass device protections and execute arbitrary code . The underlying cause is associated with the use of a default cryptographic key (CWE-1349). No specific exploit ...

CVE-2026-89057

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access...

CVE-2026-89057

A potential authentication bypass vulnerability exists in certain Lenovo tablets , characterized by CWE-288 . This flaw could allow an attacker with physical access to the device to gain unauthorized access . The vulnerability is rated with a CVSS 4.0 base score of 7.0 (High) . No specific softwa...

xmlrpc-brute

WordPress XML-RPC Bruteforce Tool A tool designed to test WordPress sites for XML-RPC vulnerabilities by attempting to brute force user credentials through the XML-RPC interface. Description This tool tests WordPress installations for XML-RPC authentication vulnerabilities. It can perform standar...

cve-2025-31651

CVE-2025-36701 — Apache Tomcat - Rewrite rule bypass Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-02-28 Affected Vendor: Apache Affected Product: Tomcat 9.0.x / 10.1.x / 11.0.x Severity: Critical / High CWE: CWE-116 Status: Under Review / Fixed / Public ✅ / Private...