cve-2021-42013.get

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

Optiva-Framework

Optiva-Framework 🕵️ Web Application Scanner 💉 Author : Joker-Security dev-labs ✔️ Description : You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin panel search SQL injection by dork As...

CVE-2026-112094

A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...

check-point-gateways-rce

Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...

Pickle-Deserialization-Exploit-in-Transformers

Exploiting Pickle Deserialization Vulnerability in Transformers Experiment Introduction Introduces the pickle deserialization mechanism and its reduce attack principle, reproduces the deserialization vulnerability CVE-2024-3568 in the Hugging Face Transformers library, analyzes security risks in...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Author Mohammed Idrees Banyamer Security Researcher 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2026-25939 , a critical authorization bypass vulnerability in FUXA open-source SCADA/ICS software. The vulnerability allows unauthenticated remote attackers to create,...

CVE-2026-113709

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data directories at a repository-controlled location...

CVE-2026-100134

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-113356

A flaw was found in DokuWiki. An authenticated remote attacker with page edit permissions can exploit a timing flaw race condition during draft saves to inject malicious data into draft files. Because the application processes this stored draft content through insecure object deserialization...

HandleKatz

HandleKatz This tool was implemented as part of our Brucon2021 conference talk and demonstrates the usage of cloned handles to Lsass in order to create an obfuscated memory dump of the same. It compiles down to an executable living fully in its text segment. Thus, the extracted .text segment of t...

CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 Exploit Script This Python script is designed to test if a Cacti instance is vulnerable to CVE-2024-43363, a Remote Code Execution RCE vulnerability caused by log poisoning. How the Vulnerability Works: Log Poisoning: An attacker injects PHP code into device names,...

sjet

sJET by siberas siberas JMX Exploitation Toolkit sJET allows an easy exploitation of insecure configured JMX services. Additional background information can be found here and here. Prerequisites Jython 2.7 Usage SJET implements a CLI interface using argparse: jython sjet.py targetHost targetPort...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...