dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 : Palo Alto OS Command Injection - Proof of Concept POC Disclamer This is a tool for security engineering and vulnerability assessment teams to quickly verify the existance of the vulnerability on their assets across the environment...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows Multiple OS command injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

CVE-2026-93349-frictionless-command-injection

CVE-2026-93349: Frictionless = 5.20.0rc1 explore OS Command Injection Severity: High, CVSS 3.1 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: all Frictionless versions = 5.20.0rc1 Component: frictionless.console.commands.explore CWE: CWE-78 OS Command Injection, CWE-20 Imprope...

CVE-2024-3400

CVE-2024-3400: OS Command Injection Vulnerability Description: CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

cve-2019-15107-lab

CVE-2019-15107 – Webmin Unauthenticated RCE Lab 1. Project Overview This project demonstrates CVE-2019-15107, a critical Remote Code Execution RCE vulnerability in Webmin, within a controlled and isolated Docker environment. The lab covers the complete vulnerability lifecycle from deployment and...

TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager ;echo ".p7m Resulting shell execution: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ injected here Note: The forward...

CVE-2021-45010

CVE-2021-45010 Exploit Title: Tiny File Manager 2.4.6 Authenticated Remote Code Execution Date: 04 Mar 2023 Exploit Author: Syd Software Link: https://github.com/prasathmani/tinyfilemanager Version: Tiny File Manager = 2.4.3 Tested on: Parrot OS 20.04 CVE : CVE-2021-45010 Reference:...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

litebox

LiteBox A security-focused library OS !NOTE This project is currently actively evolving and improving. While we are working toward a stable release, some APIs and interfaces may change as the design continues to mature. You are welcome to explore and experiment, but if you need long-term stabilit...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

CVE-2024-3400

CVE-2024-3400 Description A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...