CVE-2026-115547

An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...

CVE-2026-115546

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

CVE-2021-40905

CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

CVE-2023-32315

CVE-2023-32315 Openfire Console Authentication Bypass Vulnerability with RCE plugin Setup git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Usage python3 CVE-2023-32315.py -t http://127.0.0.1:9090 python3 CVE-2023-32315.py -l lists.txt Step...

CVE-2026-98755

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. When sending control messages across a Logical Domain Channel LDC, the driver transmits packets without completely clearing the allocated memory buffer first. A connected peer can inspect these messages to access...

CVE-2026-98754

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. An omission in locking allows a race condition to occur between device cleanup operations and asynchronous event callbacks. A local attacker could exploit this timing issue to cause a use-after-free condition,...

CVE-2020-14882

CVE-2020-14882 This Python script is designed to exploit a Remote Code Execution vulnerability in Oracle WebLogic Server CVE-2020-14882 to execute commands on a vulnerable target server and capture their output through HTTP requests. It first prompts for a target WebLogic URL and network interfac...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

endgame

ENDGAME C2 FRAMEWORK ENDGAME is a professional command and control framework built for authorized red team engagements, penetration testing, and educational security research. Designed to simulate realistic adversary techniques, assess detection coverage, and help security teams understand their...

CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway

An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...

CVE-2026-115547

The Okta Access Gateway (OAG) Admin Console is vulnerable to Command Execution due to an input validation issue that allows the processing of specially formatted configuration values. An authenticated administrator can exploit this vulnerability to execute arbitrary system commands within the con...

EUVD-2026-108569

An input validation issue in the Okta Access Gateway OAG Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account...

CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

CVE-2026-115546

The Okta Access Gateway (OAG) contains an authentication source verification issue. The system fails to validate the selected authentication source during sign-on, allowing an authenticated user with an active session to modify the authentication source parameter. This vulnerability may result in...

EUVD-2026-108568

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

ipyida

= IPyIDA IPyIDA is a python-only solution to add an IPython console to IDA Pro. Use to open a window with an embedded Qt console. You can then benefit from IPython's autocompletion, online help, monospaced font input field, graphs, and so on. You can also connect to the kernel outside of IDA usin...

MaxPatrol EDR DoS

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

QAFA Firmware Authentication Bypass

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...