CVE-2021-34371

CVE-2021-34371 python exploit - Neo4j 3.4.18 - RMI based Remote Code Execution RCE...

GHSA-5H93-6WHR-6Q8J Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...

GHSA-RWRF-2PQF-9J8J Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...

CVE-2022-21371

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...

PhpMyAdmin

This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...

CVE-2022-1388

CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...

bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

All-ReverseIP-MultiThreading

All-ReverseIP-MultiThreading Python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

CVE-2026-18504-CVE-2026-16732

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

msgspec-python313-pre

msgspec-python313-pre CVE-2025-27607 fix...

Struts2-045-Exp

Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...

CVE-2007-4559

PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...

dyen

dyen dyen loads a Mach-O dylib in memory using stock macOS Python and calls an exported entry point without dlopen on that dylib. The aim is that the image is never a standalone file on the target and is never registered with dyld. by cenobyte [email protected] 2026...

AnonHik

AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo: Alt Text...

CVE-2026-59726

CVE-2026-59726 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2023-24329-PoC

CVE-2023-24329-PoC A short and inforamtional PoC on CVE-2023-24329: Python urllib parsing flaw. git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py Based on research by Yebo Cao - https://pointernull.com/security/python-url-parse-problem.ht...

CVE-2021-4044

SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...

FBIntelPy

FBIntelPy: Python Facebook Intelligence OSINT Search Tool FBIntelPy is a Python-based Facebook intelligence search tool that aims to assists in generating filtered Facebook URLs. This is was created for the upcoming TraceLabs Search Party 2026.02. This was inspired by IntelTechnqiue's web-based...