73961 matches found
Dr0p1t-Framework
Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...
CVE-2022-29469
CVE-2022-29469 Thanks To All SynixCyberCrimeMY Members + Muslim Hackers How To Usage ? git clone https://github.com/S4muraiMelayu1337/CVE-2022-29469/ cd CVE-2022-29469 pip3 install -r requirements.txt python3 cve.py...
GHSA-W4FH-QVV9-3V23 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server. Am I...
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server. Am I...
CVE-2021-34371
CVE-2021-34371 python exploit - Neo4j 3.4.18 - RMI based Remote Code Execution RCE...
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...
GHSA-5H93-6WHR-6Q8J Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...
GHSA-RWRF-2PQF-9J8J Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Summary In affected versions, when a connected MCP server declared an outputSchema for a tool, the SDK's client validated each calltool result with jsonschema's default resolver, which fetches any $ref it cannot resolve locally by opening the URL. A server could therefore put an http://, https://...
CVE-2022-21371
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...
PhpMyAdmin
This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...
CVE-2022-1388
CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...
bbot-ui
BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features π Zero Setup - Single self-installing file, no manual dependencies π΄ Live Refresh - Auto-updates while scans are running with accurate status detection π― Smart Status Detection - Accurately...
All-ReverseIP-MultiThreading
All-ReverseIP-MultiThreading Python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
CVE-2026-18504-CVE-2026-16732
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. β‘ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
msgspec-python313-pre
msgspec-python313-pre CVE-2025-27607 fix...
Struts2-045-Exp
Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...
CVE-2007-4559
PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...
dyen
dyen dyen loads a Mach-O dylib in memory using stock macOS Python and calls an exported entry point without dlopen on that dylib. The aim is that the image is never a standalone file on the target and is never registered with dyld. by cenobyte [email protected] 2026...