1058 matches found
uro
uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...
kube-alien
Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...
rsc-security-auditor
π‘οΈ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. π¨ Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...
react2shell-ultimate
React2Shell Ultimate Scanner v2.0 ΠΡΠΎΡΠ΅ΡΡΠΈΠΎΠ½Π°Π»ΡΠ½ΡΠΉ ΡΠΊΠ°Π½Π΅Ρ RCE ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ CVE-2025-66478 Π΄Π»Ρ Next.js RSC π― ΠΠ±Π·ΠΎΡ React2Shell Ultimate β ΡΡΠΎ ΠΊΠΎΠΌΠΏΠ»Π΅ΠΊΡΠ½ΡΠΉ ΡΠΊΠ°Π½Π΅Ρ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ CVE-2025-66478, ΠΊΡΠΈΡΠΈΡΠ΅ΡΠΊΠΎΠΉ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΡΠ΄Π°Π»ΡΠ½Π½ΠΎΠ³ΠΎ Π²ΡΠΏΠΎΠ»Π½Π΅Π½ΠΈΡ ΠΊΠΎΠ΄Π° RCE, Π·Π°ΡΡΠ°Π³ΠΈΠ²Π°ΡΡΠ΅ΠΉ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ Next.js, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡΡΠΈΠ΅ React Serv...
CVE-2026-27544
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
Exploit for CVE-2026-64638
Require...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
RCE (Remote Code Execution) org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center
This High severity RCE Remote Code Execution vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
Exploit for CVE-2026-38426
CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetc...
mcp-stdio-exploit
MCP STDIO Exploit: A Local Reimplementation Vulnerability...
CVE-2026-35518
FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS CNAME records configuration parameter dns.cnameRecords. This vulnerability allows a...
CVE-2026-28674
Product/Context: xiaoheiFS (self-hosted financial/operational system). Vulnerability: In versions β€ 0.3.15, the AdminPaymentPluginUpload endpoint allows admins to upload any file to plugins/payment/ with only a hardcoded password (qweasd123456) and disregards file content. A background watcher (S...
π WordPress AI Buddy 1.8.5 Shell Upload
Proof of concept exploit for a shell upload vulnerability in WordPress AI Buddy plugin versions 1.8.5 and below. This exploit is written in PHP. ============================================================================================================================================= | Title :...
π WordPress Project Notebooks 1.1.4 Remote Code Execution
Proof of concept exploit for the WordPress Project Notebooks plugin version 1.1.4 remote code execution vulnerability that allows for privilege escalation through improper validation of AJAX actions and nonce exposure...
openSUSE Security Advisory (SUSE-SU-2026:0313-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0537
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOWFILEEDIT and DISALLOWFILEMODS settings and upload arbitrary files to the site through the "ajaxsave" function. The file is written relative to the current 's stylesheet directory, and a .php...
CVE-2024-39700
JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...
PT-2025-41532
Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver affected versions not specified Description The NVIDIA Display Driver contains a flaw where an uncontrolled DLL loading path can be exploited. This could lead to arbitrary denial of service, escalation of privileges, code...
