CVE-2025-4688

CVE-2025-4688 Se espera la publicación oficial por USOM...

CVE-2025-4822

CVE-2025-4822 Se espera la publicación oficial por parte de USOM...

CVE-2025-2301

CVE-2025-2301 Se espera la publicación oficial de USOM...

CVE-2025-5329

CVE-2025-5329 Se espera la publicación oficial por parte de USOM...

pulse-meter

Pulse Meter Esto es un trabajo en curso para analizar el System Snapshot de un dispositivo Ivanti Connect Secure con el fin de identificar posibles IOCs relacionados con CVE-2023-46805, CVE-2024-21887 y CVE-2025-0282. Advertencia : Es posible que haya falsos positivos, por lo que es mejor comprob...

roundcube-cve-2025-49113

Instalación root@kitploit: docker run --name ubuntu24 \ -p 9876:80 \ -v "$PWD/rcinstall.sh":/root/rcinstall.sh \ -it ubuntu:24.04 \ bash -c "chmod +x /root/rcinstall.sh && /root/rcinstall.sh && exec bash" POC Youtube Sígueme @Linkdin Crédito @ fearsoff-org...

Ivanti-CVE-2025-0282

Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...

NextJS-Exploit-

NextSploit: Escáner y Explotador de CVE-2025-29927 para Next.js NextSploit es una herramienta de línea de comandos diseñada para detectar y explotar CVE-2025-29927 , una falla de seguridad en Next.js. La herramienta primero identifica si un sitio web objetivo está utilizando Next.js y determina s...

CVE-2025-55182-GodzillaMemoryShell

This repository does not have a README...

CVE-2025-53024

CVE-2025-53024...

vulnerable-nextjs-14-CVE-2025-29927

vulnerable-nextjs-14-CVE-2025-29927...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...

CVE-2025-27363

This repository does not have a README...

CVE-2025-46822

CVE-2025-46822 ⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in...

CVE-2025-29927-scanner

Escáner de Vulnerabilidad de Versión de Next.js por nocomp Resumen Este script de Python es una herramienta completa para escanear múltiples subdominios y detectar versiones de Next.js e identificar posibles vulnerabilidades CVE-2025-29927. Proporciona un análisis detallado de aplicaciones web...

ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root

Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-48997 CVE-2025-48997 in multer - Patched by Root

Root has patched CVE-2025-48997 in the multer package for Root:npm. Multiple fixed versions available...

ASUS-AiCloud-RCE

Origasus origasus.go ile derlenen, ASUS AiCloud / AsusWRT ile ilişkilendirilebilecek uçların yetkili güvenlik testi veya savunma analizi ör. kendi cihazınız, yazılı penetest laboratuvarı kapsamında incelenmesi için yazılmış bir Go programıdır. Önemli: Bu tür yazılımların yetkisiz sistemlere karşı...

CVE-2025-48976_CVE-2025-48988

CVE-2025-48976CVE-2025-48988 POC...

CVE-2025-58434-PoC

CVE-2025-58434-PoC This repository contains a Proof of Concept PoC Python script for CVE-2025-58434, which enables attackers to change passwords of other users without authentication process in flowise version 3.0.5 and lower due to token leakage. Usage To run the exploit, use the...