GCTI

GCTI This repository contains GCTI's open source detection signatures...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

VulnWhisperer

Createactionable data from your vulnerability scans VulnWhisperer is a vulnerability management tool and report aggregator. VulnWhisperer will pull all the reports from the different Vulnerability scanners and create a file with a unique filename for each one, using that data later to sync with...

CVE-2026-22241

CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...

CVE-2026-48356

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-48356 Write-up: https://abraxaslabs.tech/research/CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. CVE-2026-48356-Abraxas-Labs.py chdirs into lab/ and runs...

CVE-2020-8423

CVE-2020-8423 Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c is customized especially open vmlinux version 2.6.31...

enforcement-coverage

Enforcement Coverage Finds API routes that carry a weaker authorization control than their siblings. It found CVE-2026-45316 in Open WebUI from source alone, with no advisory knowledge: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite...

cve-2026-25854

CVE-2026-25854 — Occasionally open redirect Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2026-01-30 Affected Vendor: Apache Affected Product: Tomcat 11.0.x / 10.1.x / 9.x Severity: 6.1 Medium CWE: CWE-601 URL Redirection to Untrusted Site 'Open Redirect' Status: Under...

wraithwall-toolkit

WraithWall Open-Source Toolkit Four deception-engineering tools, lifted out of a production security platform that takes live internet traffic, cleaned of all product/secret coupling, and released under MIT. This isn't a lab demo. Each tool is a piece of WraithWall — a solo-built deception platfo...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2026-75650

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75650 Write-up: https://abraxaslabs.tech/research/CVE-2026-75650 CVE-2026-75650 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. The client is CVE-2026-75650-Abraxas-Labs.py...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-1058 info: name: Gitea 1.16.5 - Open Redire...

Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. id: CVE-2019-10098 info: name: Apache HTTP server v2.4.0 to v2.4.39 - Open...

CVE-2026-33715

CVE-2026-33715 — Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php Severity : High CVSS 7.2 CWE : CWE-918 SSRF + CWE-306 Missing Authentication Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-mxc9-9335-45mc NVD :...

CVE-2022-24637

CVE-2022-24637 — Open Web Analytics prior to 1.7.4 Defensive notes on a critical unauthenticated information-disclosure issue in Open Web Analytics OWA that can lead to privilege escalation. Encountered while working the Fruityloops box on echoCTF, which ran Open Web Analytics 1.7.3. Summary Fiel...

Open-Redirect-Finder

Open-Redirect-Finder Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL. Features Batch Processing: Supports testing multiple URLs at once from an input file. Automatic Validation: Checks whether the entered URLs are vulnerable to open redirects...

ovswrap

OVSwrap — Linux kernel Open vSwitch datapath overflow tracking site Source for the OVSwrap patch-status tracker: a single-page site recording which distributions have shipped a fix for the Open vSwitch datapath overflow in the Linux kernel. Where the facts live Everything about the bug — CVE IDs,...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...

cve-2026-46391

CVE-2026-46391 - Credential Exposure via SSRF in @haxtheweb/open-apis Proof of concept for CVE-2026-46391. Triggers the SSRF vulnerability in the cacheAddress endpoint of @haxtheweb/open-apis and captures the service account credentials sent in the callback. Build go build -o cve-2026-46391 . Tes...