CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Exploit de Ejecución Remota de Código v2 Exploit funcional para Open Web Analytics 1.7.3 - RCE mejorado con el php reverse shell de pentestmonkey. Corregido el problema de no poder encontrar al usuario en la caché. El exploit original se puede encontrar...

ovswrap

OVSwrap — Linux kernel Open vSwitch datapath overflow tracking site Source for the OVSwrap patch-status tracker: a single-page site recording which distributions have shipped a fix for the Open vSwitch datapath overflow in the Linux kernel. Where the facts live Everything about the bug — CVE IDs,...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

privacytools.io

Encryption Against Global Mass Surveillance. Contributing This project is archived. See our Welcome to Privacy Guides post for more information. Our project has now moved on to Privacy Guides. It's important for a website on privacy to be up-to-date. Keep an eye on software updates of the...

OVSwrap-CVE-2026-64531-Mitigation-Tool

OVSwrap CVE-2026-64531 Mitigation Tool A simple script that detects and mitigates the OVSwrap vulnerability affecting Open vSwitch kernel modules. Features Detects vulnerable Open vSwitch modules Determines whether the module is loaded Blocks automatic loading Removes the module safely Verifies...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

CVE-2022-24181

CVE-2022-24181 y CVE-2022-26616. probablemente son iguales Open-journal-system-Vulnerabilidad XSS mediante inyección de Host Header y robo del token de restablecimiento de contraseña de otro usuario Pasos para reproducir: 1. Ir a este sitio: https://who's-using-ojs-software.com 2. Capturar esta...

AI and the Automobile

Open Arsenal IA y las Especificaciones del Automóvil La colección AI and the Automobile reúne múltiples especificaciones que definen cómo la IA se integra en los sistemas de vehículos modernos. En su conjunto, trata el automóvil como una plataforma definida por software donde la inteligencia se...

Le Panthéon de la Souveraineté

🏠 Desarrollado en: GitLab | 🪞 Espejo automatizado en: GitHub 🏛️ El Panteón de la Soberanía Una infraestructura cloud 100% soberana, redundante y segura, diseñada para liberarse totalmente de los GAFAM. Versión 1.1: Base de red privada, cifrado de las consultas DNS de los servidores DoT y...

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

cacti

Cacti Descripción general Cacti es una plataforma de monitoreo y graficación de redes de código abierto construida sobre RRDtool. Proporciona un marco escalable para recopilar, almacenar y visualizar datos de series temporales de dispositivos de red, servidores y aplicaciones. Las capacidades...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

CVE-2022-24637

CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.3. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

stylesmuggler

StyleSmuggler HTTP PoC Приватный исследовательский репозиторий для воспроизведения StyleSmuggler исключительно по HTTP, CVE-2026-75650, против локального лабораторного стенда Magento Open Source. Полное техническое описание читайте в Magento StyleSmuggler RCE: Report Poisoning to Code Execution...

stylesmuggler

StyleSmuggler HTTP PoC Private research repository for the HTTP-only reproduction of StyleSmuggler, CVE-2026-75650, against a local Magento Open Source lab. Read the full technical walkthrough in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. The Python PoC performs the complete...

red-clippy

Red Clippy Your agent tests. Red Clippy keeps the record. Open-source pentest management built to be operated by an AI agent. Connect it to Claude Code over MCP and it runs the engagement alongside you: scope and assets, recon observations, methodology coverage, and findings with CVSS and evidenc...