1383770 matches found
ROOT-APP-GOBINARY-CVE-2026-78660 CVE-2026-78660 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-78660 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-78669 CVE-2026-78669 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-78669 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-27136 CVE-2026-27136 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-27136 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
pentest-writeups
pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Penetration Testing Writeup Author: Amirbek Raxmatullayev @americo444 Date: 2026-06-17 Platform: VulnHub Difficulty: Beginner Objective: Gain root access 1. Environment Setup Component| Details ---|---...
MassZeroLogon
Tool for mass testing ZeroLogon vulnerability CVE-2020-1472 Steps to procedure For using this tool you need a hosts file with the ip adress and hostname separated by comma Hosts file sample 1.1.1.1 , WIN-6641554161U 1.1.1.1 , SERVERDATA 1.1.1.1 , SERVER2012 1.1.1.1 , DC01 1.1.1.1 , SERVER You can...
CVE-2014-5139
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2018-12540
This repository does not have a README...
mcpshield
mcpshield A drop-in fix for the unpatched MCP STDIO command-injection flaw the CVE-2026-30623 family, disclosed by OX Security in April 2026 as "by design" -- no SDK patch is coming. Import one line, and every stdio MCP server your Python app launches gets its command/args/env validated before th...
CVE-2024-23897
CVE-2024-23897 Scraping tool to ennumerate directories or files with the CVE-2024-23897 vulnerability in Jenkins. Usage python3 scraping.py -u http://server:8080 -l /path/to/wordlist -o output.txt...
BigFinger
CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Python3 script to exploit the unauthenticated remote code execution vulnerability CVE-2023-46747 in F5 BIG-IP appliances via the TMUI interface. Basically, if this vuln hits, you get a shell without credentials. Built with threading, file inpu...
demo-CVE-2021-29447-lezione
POC CVE-2021029447 - XXE in WordPress WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 https://vulners.com/cve/CVE-2021-29447 Using Step1. Run WordPress $ make up-wp Step2. Run Attacker web server $ make up-mal Step3. Generate malicious WAV file With wavefile npm $ make make-wav Step4...
pwnedit
pwnedit CVE-2021-3156 - Sudo Baron Samedit Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodes 1. Files | Blog | Video Why Pick sudo as Research Target? 2. Files | Blog | Video How Fuzzing with AFL works 3. Files | Bl...
CVE-2026-18963_analyst
Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...
vsftpd-cve-2011-2523-detection-signature
Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...
CVE-2019-12796
CVE-2019-12796 This repository will contain information regarding CVE-2019-12796 once it is made public...
Hacking-Electron-Apps-CVE-2020-35717-
Hacking-Electron-Apps-CVE-2020-35717-...
CVE-2024-25170-Mezzanine-v6.0.0
Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25170 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host Header. POC is coming soon:...
POC-CVE-2017-12615-or-CVE-2017-12717
POCCVE-2017-12615 CVE-2017-12615 for tomcat server Original POC: https://www.exploit-db.com/exploits/42953/...