DylibHijackTest

DylibHijackTest Requirements Install Python3 requirements: pip3 install -r requirements.txt Compile dylib from source because don't trust compiled things from GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib How it Works ⚠️ This will spawn many processes on your machine, run this...

CVE-2020-35846

Cockpit CMS NoSQL Injection to Remote Code Execution : CVE-2020-35846 Description Cockpit CMS has some NoSQL Vulnerabilities which can be used to dump users' information, This information disclosures can be chained together to change users' passwords and which leads to Remote Code Execution on th...

wnfexec

Overview WnfExec is a C proof of concept library that injects shellcode into a process by hijacking a WNF subscription callback then triggering a state change. There's nothing novel here and was built based on the research of others. My intent was to solidfy the concept in my head, document the...

CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...

CVE-2023-46805

CVE-2023-46805 Scanner CVE-2023-46805 Scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. Script version: 1.3 Updated with the recent blog post made by Assetnote ⚠️ This script is for defensive purposes and should be used by cybersecurity professionals to...

CVE-2025-28009

CVE-2025-28009 - SQL Injection in Dietiqa App v1.0.20 Discovered by: Saharuddin Azman Vendor: Appventure Sdn Bhd Product: Dietiqa App Version Affected: v1.0.20 CVE ID: CVE-2025-28009 Vulnerability Type: SQL Injection 📝 Description A SQL Injection vulnerability exists in the u parameter of the...

Sharperner

Sharperner Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning. Features PE binary Process Hollowing PPID Spoofing Random generated AES...

CVE-2023-25157

CVE-2023-25157 - GeoServer SQL Injection - PoC CVE: CVE-2023-25157 Date: 06/06/2023 Vendor/Software: GeoServer Severity: 9.8/10 - This script is a proof of concept for OGC Filter SQL Injection vulnerabilities in GeoServer, a popular open-source software server for sharing geospatial data. It send...

GHSA-RJH2-4XGW-P2HJ Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

Summary Atlantis passes the Terraform workspace value from a pull request's atlantis.yaml into a shell command without quoting or escaping it. A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary commands as...

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

Summary Atlantis passes the Terraform workspace value from a pull request's atlantis.yaml into a shell command without quoting or escaping it. A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary commands as...

CVE-2022-40634

CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS By inserting malicious content in a FTL template, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote Code Execution...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018 armv6l...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQL Injection Details Field| Info ---|--- CVE ID| CVE-2026-37749 Type| SQL Injection → Authentication Bypass Severity| Critical CVSSv3: 9.8 Vendor| CodeAstro Product| Simple Attendance Management System Version| 1.0 Discoverer|...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI Overview This repository contains scripts to check for the CVE-2024-4577 vulnerability, an argument injection issue in PHP-CGI. You can use the provided Bash, Go, and Python scripts to test a list of domains for this vulnerability. I've als...

jsPDF-Object-Injection

CVE-2026-25755 Sandbox Bypassed jsPDF Flaw to Object Injection Overview A critical PDF Object Injection vulnerability CVE-2026-25755 was discovered in jsPDF, a widely-used JavaScript library for generating PDF documents in client-side applications. The vulnerability exists in the addJS function,...

CVE-2021-24750

How to use Start mysql, wordpress and wordpress-cli using docker-compose docker-compose -f docker-compose.yaml up -d Install wordpress, activate the plugin and create a user with the role subscriber using wordpress-cli docker-compose run --rm wp-cli install-wp Start the exploit script with an sql...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://kushagraojha.medium.com/vmware-vrealize-network-insight-cve-2023-20887-193f3c3d30a0...

Weblogic-CVE-2023-21839

Weblogic-CVE-2023-21839 CVE-2023-21839 A wheel built based on publicly available PoC from the internet Affected Versions 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage java -jar 目标ip:端口 ldap地址 Recommended Tool: https://github.com/WhiteHSBG/JNDIExploit Disclaimer This tool is only for cybersecurity...

CVE-2026-24061

GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...

opnsense-tunables-loader

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-tunables-loader opnsense-tunables-loader Class: Config line injection Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org System: Advanced: Tunables still interpolates name/value into /boot/loader.conf...