Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...

CVE-2021-31589

Badges License MIT Installation Install cve-2021-31589 with npm npm install cve-2021-31589 -g Usage Example for single url cve-2021-31589 -u http://example.com Usage Example for list of urls cve-2021-31589 -l urls.txt -o out.txt Screenshots Help menu Get all items 👋 Hey karthithehacker...

ghost-compact

Xint's OpenAI Compaction Research Two major findings in OpenAI's compaction API: GhostCompact : a billing bug that made OpenAI compaction, and the arbitrary inference it can perform, nearly free. Code: ghostcompact.py, ghostscan.py. blog post Compaction Smuggling : steering compaction to copy a...

Redcloud

Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. 💁☁️🐚🌱 Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...

SubMon

SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...

CVE-2026-6471

🐘 CVE-2026-6471 — PostGREShell 🛢️ A critical security vulnerability that has been present in PostgreSQL for 12 years has been discovered! A defensive, non-destructive vulnerability checker for CVE-2026-6471 📌 Overview CVE-2026-6471 is a PostgreSQL authorization vulnerability involving the logical...

wordpress-batch-rce-lab

wp2shell: WordPress Batch RCE A technical breakdown of CVE-2026-63030, a logic bug in WordPress core's REST API batch endpoint that lets an anonymous request dispatch under a different request's route and permission check, chaining into CVE-2026-60137 SQL injection for unauthenticated remote code...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478. bug bounty...

CVE-2024-20674

CVE-2024-20674 This is my take at an exploit of the public CVE CVE-2024-20674 to achieve Kerberos mutual authentication bypass using a logic bug in the client-side handling of Kerberos U2U TGT-REP. This can be used for instance to serve arbitrary GPOs when spoofing the DC to a client, and take...

cve-2025-32463

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vulnerability Overview Vulnerability Name: Copy Fail CVE Identifier: CVE-2026-31431 Discovered By / Authors: Xint Code Research Team building upon initial foundational research by Theori researcher Taeyang Lee. "Copy Fail" is a critical logic...

CVE-2017-7651

Info This repository is used to display the C++ code used by Felipe Balabanian on his discovery https://bugs.eclipse.org/bugs/showbug.cgi?id=529754. You can find the compiled binary in the release section. Disclaimer This is not my code and I do not take credit for any work...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

NexusDB <4.50.23 - Local File Inclusion

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. id: CVE-2020-24571 info: name: NexusDB 4.50.23 - Local File Inclusion author: pikpikcu severity: high description: NexusQA NexusDB before 4.50.23 allows the reading of files via ../...

MajorDoMo - Unauthenticated RCE

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...

SUSE CVE-2026-98872

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...