MongoDeepDive

🌊 MongoDeepDive استغلال بروتوكول MongoDB السلكي المدرك للسياق CVE-2025-14847 محلل استدلالي متقدم لعمليات الفريق الأحمر 💀 نظرة عامة MongoDeepDive هو ماسح ثغرات عالي الأداء وغير متزامن ومحلل جنائي مصمم لاكتشاف تسريبات الذاكرة غير المهيأة في خوادم MongoDB المتأثرة بـ CVE-2025-14847. على عكس نصوص PoC...

CVE-2024-42992

CVE-2024-42992 Python Pip Pandas v2.2.2 में एक मनमानी फ़ाइल पाई गई Pip Pandas सभी संस्करण - =2.2.2 “pandas” लाइब्रेरी में एक मनमाना फ़ाइल पढ़ने की भेद्यता मौजूद है, जिसका उपयोग करके हमलावर फ़ाइल सिस्टम में किसी भी फ़ाइल को बिना किसी प्रतिबंध के पढ़ सकता है। यह भेद्यता “/etc/passwd” जैसी संवेदनशील...

POC-2020-8558

نظرة عامة CVE-2020-8558 هي ثغرة أمنية في Kubernetes نُشرت لأن kube-proxy بشكل غير متوقع يجعل خدمات المضيف المرتبطة بـ localhost متاحة للآخرين على الشبكة. أضع التركيز على غير متوقع لأن هذه الثغرة ناتجة عن عيب في التصميم إهمال وليس عيبًا في التنفيذ خلل. الكود يفعل بالضبط ما يفترض أن يفعله، لكننا...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Scanner Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved Authorized under CYBERDUDEBIVASH AUTHORITY – Ethical detection tool for CVE-2025-20393 unauthenticated RCE in Cisco Secure Email Gateway / SMA. This tool helps identify exposure t...

CVE-2023-40028

CVE-2023-40028 के लिए प्रूफ ऑफ कॉन्सेप्ट PoC CVE-2023-40028 एक Ghost CMS में कमजोरी है जो अनुचित फ़ाइल हैंडलिंग के माध्यम से मनमानी फ़ाइल पढ़ने की अनुमति देती है। यह PoC दर्शाता है कि नियंत्रित परिस्थितियों में एक्सप्लॉइट कैसे काम करता है। केवल शैक्षिक उपयोग के लिए। संदर्भ: मूल PoC से अनुकूलित,...

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector تنفيذ تعليمات برمجية عن بُعد دون مصادقة RCE الوصف المنتج : MCPJam Inspector الإصدارات المتأثرة : ≤ 1.4.2 الإصدار المُصحَّح : 1.4.3 النوع : تنفيذ تعليمات برمجية عن بُعد دون مصادقة RCE ناقل الهجوم : الشبكة المصادقة المطلوبة : لا تفاعل المستخدم المطلوب : لا CVSS v3....

kygocera

kygocera CVE-2022-1026 Improved Golang Version of Rapid7 PoC for CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ credits to Aaron Herndon / https://twitter.com/ac3lives greets to https://github.com/D4RKMATT3R CVE-2022-1026 install gi...

CVE-2025-49132_poc

CVE-2025-49132poc Usage Examples 1. Scan a single target : python3 CVE-2025-49132poc.py -u http://pterodactyl.example.com 2. Scan a list of targets : python3 CVE-2025-49132poc.py -f targets.txt 3. Save scan results : python3 CVE-2025-49132poc.py -f targets.txt -o scanresults.txt Example Output:...

cve-2022-22947-spring-cloud-gateway

भेद्यता का परिचय Spring Cloud Gateway, Spring Cloud का एक नया प्रोजेक्ट है। यह प्रोजेक्ट Spring 5.0, Spring Boot 2.0 और Project Reactor जैसी तकनीकों पर आधारित एक गेटवे है, जिसका उद्देश्य माइक्रोसर्विस आर्किटेक्चर के लिए एक सरल, प्रभावी और एकीकृत API रूटिंग प्रबंधन का तरीका प्रदान करना है। कुछ समय...

ollama

ollama This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-12886 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps th...

CVE-2023-5612

Disclosure of the public email in Tags RSS Feed https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the...

CVE-2026-23918-Passive-Audit

CVE-2026-23918 audit script alternatively you could just curl the headers and take a peek, but here comes the: Non-invasive HTTP metadata auditor for Apache HTTP Server CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19 exposure triage. The tool sends ordinary HTTP HEAD/GET...

node-vulnerable

node-vulnerable This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately exploitable. EXPOSURE will report an exploitable verdict against it. Tracked CVEs: CVE-2018-21268 — traceroute command injection via the host argument. Exploitable in this baselin...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: حقن SQL في Magento يحتوي هذا المستودع على إثبات مفهوم PoC لاستغلال CVE-2019-7139 PRODSECBUG-2198، وهي ثغرة حقن SQL غير مصادق عليها في Magento، اكتشفها Charles Fol من Ambionics Security. تفاصيل الثغرة معرّف CVE : CVE-2019-7139 الإصدارات المتأثرة : Magento Open Source 2. سيحاول...

CVE-2025-32421

CVE-2025-32421 Eclipse Technique Lab Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch. WARNING - EDUCATIONAL PURPOSE ONLY This laboratory is designed exclusively for:...

django-cve-2025-64459

Django CVE-2025-64459 This application demonstrates CVE-2025-64459 affecting multiple Django versions. This vulnerability has been patched in newer releases of Django. SQL Injection SQL Injection is when user-provided input is treated as part of a SQL query, allowing an attacker to change how the...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

Jakarta Tomcat 3.1 and 3.0 - Information Disclosure

Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access. id: CVE-2000-0760 info: name: Jakarta Tomcat 3.1 and 3.0 -...

Debug Endpoint pprof - Exposure Detection

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8,...

Jira - Local File Inclusion

Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion. id: CVE-2019-8442 info: name: Jira - Local File Inclusion author:...