CVE-2026-104960 Plane: Authorization bypass in workspace-scoped asset download endpoint exposes secret project file assets to non-project workspace users

Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/workspaces/workspaceslug/download/assetid/ endpoint for project-bound FileAsset objects without enforcing access to the asset's owning project. An authenticated user who belongs ...

Get-ReconInfo

Get-ReconInfo NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat -ano ipconfig...

CVE-2018-6574

CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...

go-get-RCE

go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Code for veracode blog To demonstrate the Code Execution, 1. Build the project using maven 2. Execute python3 -m http.server 8080 to run the http server 3. Run exploit.java. You should observe a HTTP GET request on the server 4. To demonstrate how SnakeYAML 2.0 prevent...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

PyFlooder

PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...

CVE-2026-81000

cve-id 기부 이 프로젝트 유지 관리 돕기 이 프로젝트가 유용하다고 생각하신다면, PayPal 또는 ABA Mobile을 통해 지속적인 유지 관리를 후원해 주시기 바랍니다. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 모든 기부금의 10퍼센트는 Kantha Bopha 어린이 병원에 기부됩니다. | 결제 방법 선택 ABA Mobile로 스캔 · 클릭하여 확대 ---|--- ⚡ 간단한 사용법 GitHub에서 직접 최신 버전의 외부 다운로드...

go-get-rce

This repository does not have a README...

MalleableC2Profiles

MalleableC2Profiles Malleable C2 profiles for Cobalt Strike version 3.6+ bingsearchgetonly.profile - Bing web search profile, uses GET requests only cnnvideogetonly.profile - MSNBC live video straming profile, uses GET requests only googledrivegetonly.profile - Google Drive document viewer...

CVE-2026-63269

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...

CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...

extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

MicroburstSecretsHunter

MicroBurst Secrets Hunter Azure 환경에서 평문으로 저장되어서는 안 되는 비밀번호, 키, 연결 문자열 및 기타 비밀 정보를 찾기 위해 MicroBurst 의 Get-AzDomainInfo 출력을 샅샅이 훑어보는 PowerShell 스캐너입니다. 읽기 전용 감사 워크플로 를 위해 설계되었습니다: MicroBurst로 도메인 덤프를 수집하고Get-AzDomainInfo에는 Reader 권한이면 충분합니다, 이 도구를 출력 폴더에 지정하면 됩니다. 이 도구는 Azure 자체에는 접촉하지 않으며, 이미 내보낸...

CVE-2025-55885

CVE-2025-55885 Description SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Ligne before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php Attack Vectors SQL injection via unsanitized GET parameter ocid on...

ParamPamPam

ParamPamPam This tool for brute discover GET and POST parameters. Installation With Docker Install Docker git clone https://github.com/Bo0oM/ParamPamPam.git cd ParamPamPam docker build -t parampp . echo -e '!'"/bin/bash\ndocker run -ti --rm parampp $@" /usr/local/bin/parampp parampp -u...

sqlmc

SQLMC - SQL 인젝션 대량 점검기 Demo 정보 이 도구는 교육 목적으로만 사용해야 하며, 사전 상호 동의 없이 SQLMC를 사용하여 대상을 공격하는 것은 불법입니다. 개발자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인한 오용이나 손해에 대해 책임을 지지 않습니다. 개요 SQLMCSQL Injection Massive Checker는 도메인의 SQL 인젝션 취약점을 스캔하도록 설계된 도구입니다. 주어진 URL을 지정된 깊이까지 크롤링하고, 각 링크의 SQL 인젝션 취약점을 확인한 후 결과를 보고합니다. 기능 도메인...