CVE-2023-28252-

CVE-2023-28252- اكتشاف استغلال CVE-2023-28252 مراقبة إنشاء الملفات في الدليل الذي يترك فيه الاستغلال الملفات المستخدمة في الاستغلال، وفق مسار محدد بشكل ثابت داخل المجلد "C:\Users\Public"، و"C:\Users\Public.container"، و"C:\Users\Public\MyLog.blf"، و"C:\Users\Public\p"...

nccfsas

परिचय यह रिपॉजिटरी NCC Group की Full Spectrum Attack Simulation FSAS टीम द्वारा सार्वजनिक रूप से जारी की गई जानकारी रखती है।...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up: $ pip...

PoC-public

PoC-public يجمع هذا المستودع أكواد PoC التي نشرناها في مختلف المؤتمرات الأمنية. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

Public_Poc

0xmrsecurity.github.io صفحة ويب مدونة شخصية أفكار أتعلم وأكتب إثباتات المفاهيم العامة من أجل فهم أفضل لمهارات الاختراق والبرمجة...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" إثبات مفهوم PoC لثغرة RCE دون مصادقة إثبات مفهوم PoC لثغرة تنفيذ التعليمات البرمجية دون مصادقة عبر buildpublictmp في Langflow. يقوم برفع مكوّن خبيث إلى تدفّق عام، ويشغّل البناء، ويلتقط قشرة عكسية. لأغراض اختبار الأمان المصرَّح به فقط. استخدمه فقط ضد الأنظمة التي...

gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

HijackLibs

HijackLibs यह परियोजना सार्वजनिक रूप से प्रकट DLL हाईजैक अवसरों का रिकॉर्ड रखने का लक्ष्य रखती है। इस रिपॉजिटरी का वेब संस्करण आप https://www.hijacklibs.net पर पा सकते हैं। लाइसेंस : GPLv3.0 आचार संहिता : Contributor Covenant योगदान मार्गदर्शिका YAML स्कीमा परियोजना द्वारा उपयोग किया गया नमूना YA...

wiz-research-iocs

قاعدة بيانات Wiz Research العامة لمؤشرات الاختراق يحتوي هذا المستودع على مؤشرات اختراق عامة تم تجميعها بواسطة Wiz Research...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

s3-leaks

s3-leaks قائمة تسريبات AWS S3 لا تتردد في إرسال طلب سحب PR إذا كنت تعرف تسريبات أخرى التاريخ| الوصف| ملاحظات ---|---|--- أبريل 2025| أفكار حول معرّفات مفاتيح الوصول إلى AWS من حاوية S3| مفاتيح مملكة AWS مارس 2025| 16,000 مشترك في صحف Nine من أستراليا| الاسم والعنوان البريدي و/أو عنوان البريد...

osintbuddy

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | Introducing OSINTBuddy Notice - No, this projec...

Vite Dev Server - Path Traversal

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the server.fs settings. Only apps that explicitly expose the Vite dev server to the network using --host or...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

YMC Filter WordPress - Unauthenticated Post Disclosure

YMC Filter WordPress plugin 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication. id: CVE-2026-10823...