security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

themis

Themis provides strong, usable cryptography for busy people General purpose cryptographic library for storage and messaging for iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, desktop Java, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM. Perfect fit for multi-platform apps...

stylesmuggler

StyleSmuggler HTTP PoC Private research repository for the HTTP-only reproduction of StyleSmuggler, CVE-2026-75650, against a local Magento Open Source lab. Read the full technical walkthrough in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. The Python PoC performs the complete...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control via an open port IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 An exposed port 9989 responds with a live snapshot at the time of request, by using a script, it could be leveraged to have a live fe...

metasploit-framework-nu11secur1ty

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CLEANSTART-2023-RF89232 Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualifie...

CVE-2020-12695 affects multiple packages. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue...

TekDefense

TekDefense Open Development projects for TekDefense All projects use the MIT License model, which basically means, use any of this as you see fit, but don't hold me responsible for any loss or damage that occurs from using or modifying any of these projects. Please visit www.TekDefense.com for...

ncccodenavi

ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...

irdoc-app

IRDoc - Incident Response Documentation Platform Timeline-first IR documentation with visual report builder, SharePoint auto-sync, and AI-assisted summaries. What is IRDoc? IRDoc is a self-hostable, open-core incident response documentation platform for SOC analysts, IR engineers, and MSSPs. It...

ransomware-simulator

Ransomware Simulator NCC Ransomware Simulator Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Donato Ferrante, donato dot ferrante at nccgroup dot trust https://www.github.com/nccgroup/ransomware-simulator Released under AGPL see LICENSE for more information To...

ProxyListReliabilityCheck

ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

CVE-2021-43657

CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

CVE-2023-38646-Poc

CVE-2023-38646-Poc usage python check.py ip port Vulnerable version Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabase open source...

CVE-2020-12078

CVE-2020-12078 The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078...

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...