CVE-2023-38831

CVE-2023-38831 This is an easy to use tool that creates a CVE-2023-38831 exploit that affects all WinRAR versions prior to 6.23. Here's more info about the CVE-2023-38831 exploit RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within...

FakeNetBIOS

Note to author: if you would like this pulled from Github, I understand and will do so without question. Since you have provided source I @mubix figured it would be a good way to get improvments into the package | | | FakeNetBIOS Tools | | | | Simulation of NetBIOS hosts Windows-like | | |...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in /index.php/history - vulnerable field: "Customer's Name". Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. T...

CVE-2010-0426

CVE-2010-0426 https://www.cvedetails.com/cve/CVE-2010-0426/ sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain...

Shell3er

Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...

CVE-2026-82399

A flaw was found in CoreDNS. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted DNS requests over custom transports, such as DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC. By using DNS name compression and excessive section counts, t...

CVE-2026-27199-werkzeug-safe-join-bypass-PoC

PoC CVE-2026-27199: Bypass de safejoin de Werkzeug mediante nombres de dispositivo de Windows Estado: Divulgado públicamente. Corregido en werkzeug 3.1.6. Gravedad: Moderada Reportero: @alimezar Aviso: GHSA-29vq-49wr-vm6x Versiones afectadas...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

RCLocals

RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...

eavesarp

Eavesarp A reconnaissance tool that analyzes ARP requests to identify hosts that are likely communicating with one another, which is useful in those dreaded situations where LLMNR/NBNS aren't in use for name resolution. Brought to you by: Requirements/Installation This is only gon' work on Kali o...

CVE-2025-47917

CVE-2025-47917 Exploit Use-After-Free in mbedTLS Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerability : Use-After-Free UAF in mbedTLS 3.6.4 name parsing Description This repository contains an exploit targeting a Use-After-Free vulnerability in the...

CVE-2026-4480-PoC

CVE-2026-4480：Samba print-command（%J）インジェクション PoC 重要 — 最初に必ずお読みください： このリポジトリおよび exploit.py は教育および研究目的のみ 提供されています。明示的な書面による許可 がないシステム、ネットワーク、またはサービスに対してこのコードを使用しないでください 。許可されていないコンピュータシステムへのアクセスは違法かつ非倫理的です。このコードを使用することにより、適用される法律および機関のポリシーに従うことに同意したものとみなします。 Samba...

kerberoast

kerberoast Kerberoast is a series of tools for attacking MS Kerberos implementations. Below is a brief overview of what each tool does. Extract all accounts in use as SPN using built in MS tools root@kitploit: PS C:\ setspn -T medin -Q / Request Tickets One ticket: root@kitploit: PS C:\ Add-Type...

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

com.simplemobiletools.dialer

This repository does not have a README...

CVE-2023-29839

CVE-2023-29839 Hotel Druid 3.0.4 Stored Cross Site Scripting Vulnerability CMS Link: https://www.hoteldruid.com/ Version Affected: 3.0.4 Severity & CVSS: 5.4 Medium | Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N A Stored Cross Site Scripting XSS vulnerability exists in multiple pages in...

CVE-2026-1953

CVE-2026-1953 | Stored XSS — Nukegraphic CMS v3.1.2 Overview A Stored Cross-Site Scripting XSS vulnerability exists in Nukegraphic CMS v3.1.2. The issue allows an authenticated user to inject malicious JavaScript into the profile name field, which is stored in the backend database and executed...

CVE-2025-46080

BUGAuthor: yggcwhat Affected version: Huocms Vendor: https://huocms.com/ Source Code Address: https://gitee.com/digital-flag/huocms Vulnerability File: AttachmentController.php Affected Version： HuoCMS - controller -backend - AttachmentController.php:editFileUrl The suffix of $newPathUrl in the...

CVE-2026-92398

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2017-7494

CVE-2017-7494 hello i,am Gihad from Libya 17 C information On Exploit ========================================================================================== This module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This module...