1462151 matches found
external_wpa_supplicant_8_AOSP10_r33_CVE-2021-0326
wpasupplicant and hostapd Copyright c 2002-2019, Jouni Malinen [email protected] and contributors All Rights Reserved. These programs are licensed under the BSD license the one with advertisement clause removed. If you are submitting changes to the project, please see CONTRIBUTIONS file for...
CVE-2026-26801-pdfmake-ssrf
pdfmake SSRF Vulnerability PoC Vulnerability Summary Field| Value ---|--- Package| pdfmake Version| = 0.3.0-beta.2, CREDENTIALS LEAKED! This proves the vulnerable server made an outbound request to our controlled endpoint. Full Read SSRF npm run exfiltrate The a...
Spring4Shell-POC
Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept/Information + A vulnerable Tomcat server with a vulnerable spring4shell application. Early this morning, multiple sources has informed of a possible RCE exploit in the popular java framework spring. The naming of this fl...
cve-2026-31431-copy-fail
CVE-2026-31431 "Copy Fail" Scanner & Patch Helper Copy Fail is an automated security scanner and patch helper for detecting and remediating the CVE-2026-31431 vulnerability Linux Kernel algifaead Local Privilege Escalation across your Linux infrastructure. Table of Contents Description Key Featur...
WSUSploit.NET
WSUSploit.NET C PoC for CVE-2025-59287 Basically a port of the initial public PoC. Warning, will mess up WSUS. Disclaimer: This is for ethical and legal security testing, research, and education. Do not use any of this software in any unauthorized manner. Defensive Considerations These HTTP calls...
CVE-2022-1119
CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply with relevant la...
PrintNightmare
PrintNightmare Python implementation for PrintNightmare CVE-2021-1675 / CVE-2021-34527 using standard Impacket. Installtion $ pip3 install impacket Usage Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port -target-ip ip address -hashe...
CVE-2026-34753
This repository does not have a README...
cve-2021-44228-log4j-exploits
CVE-2021-4428 Reproduction This DEMO is a replication of the Log4j2 ultra-high-risk RCE vulnerability CVE-2021-4428, aiming to understand the harmfulness of this vulnerability and make targeted defenses based on your system's situation. Warning This DEMO is solely for technical research purposes...
CVE-2017-8046-DEMO
spring data rest CVE-2017-8046 demo test please UPGRADE spring data rest NOW. steps 启动本应用 创建test instance POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" 利用spel注入, 会启动C:\Windows\system32\calc.exe PATCH /entityPersons/1...
Honeypot-for-CVE-2025-59287-WSUS
wsus-decoy Defensive proof of concept decoy for CVE-2025-59287 WSUS. The decoy emulates WSUS web endpoints on ports 8530 and 8531, captures full HTTP request bodies and headers, stores evidence for forensic analysis, and includes a Windows test harness to validate endpoint, file and process...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: xcaddy: xcaddy-0.4.7-0.3.hum1 aarch64, s390x, x8664 xcaddy-0.4.7-0.3.hum1.src src Security Fixes: xcaddy: CVE-2026-111943...
cve-2019-3396
cve-2019-3396...
Ubuntu-0day
Ubuntu16.04-0day Vulnerability scope: all 4.4 ubuntu aws instances are vulnerable Jann Horn discovered that in some cases, the Berkeley Packet Filter BPF in the Linux kernel incorrectly performed sign extension in checkaluop. A local attacker can use this to escalate privileges on the system and...
CVE-2022-26134
CVE-2022-26134 Practice writing PoC in Go Usage go get -u -v github.com/wjlin0/CVE-2022-26134 CVE-2022-26134 -url https://example.com/ Build git clone https://github.com/wjlin0/CVE-2022-26134 cd CVE-2022-26134 && chmod +x build.sh && ./build.sh...
Log4j2-CVE-2021-44228
CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web mvn dependency:treejava INFO | | +- org.springframework.boot:spring-boot-starter-logging:jar:2.6.1:compile INF...
CVE-2017-9798
Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage python check.py --path /var/customers/webs/...
vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
CVE-2023-23752
CVE-2023-23752 Introduction Open source, Go-based multi-concurrent batch POC detection, high accuracy. Testing 1k entries takes about 40 seconds, with over 90% accuracy. Usage Generate Linux executable set CGOENABLED=0 set GOOS=linux go build cve-2023-23752-PoC.go Generate Windows executable set...