FallingSkies-CVE-2023-35885

CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ Affected version: v2.0.0 – v2.3.0 Patched version: v2.3.1 Vendor homepage: CloudPanel.io Product: CloudPanel References:...

Apisix_Crack

ApisixCrack Descripción Herramienta de detección y explotación de vulnerabilidades de la serie Apisix, incluyendo la vulnerabilidad de acceso no autorizado CVE-2021-45232 y la vulnerabilidad de clave predeterminada CVE-2020-13945, compatible con detección y explotación por lotes. Uso Detección po...

cookiemonster

🍪 CookieMonster CookieMonster es una herramienta de línea de comandos y API para decodificar y modificar cookies de sesión vulnerables de varios frameworks diferentes. Está diseñada para ejecutarse en tuberías de automatización que deben ser capaces de procesar de manera eficiente una gran cantid...

CVE-2022-23529-Exploration

CVE-2022-23529 The JSON Web Token JWT library versions prior to 3.4.6, 4.0.4, and 4.1.5 are vulnerable to RCE. The HMAC hashing functions take any string as input which leads to RCE. Due to the preconditions, this vulnerability is not likly to be exploitable. In order to exploit this vulnerabilit...

Photon

Photon Increíblemente rápido rastreador diseñado para OSINT. Wiki de Photon • Cómo Usar • Compatibilidad • Librería de Photon • Contribución • Hoja de Ruta Características Clave Extracción de Datos Photon puede extraer los siguientes datos mientras rastrea: URLs dentro del alcance y fuera del...

SubDomainizer

Cómprame un Café SubDomainizer SubDomainizer es una herramienta diseñada para encontrar subdominios ocultos y secretos presentes en una página web, en Github y en los JavaScripts externos que se encuentran en la URL proporcionada. Esta herramienta también encuentra buckets S3, URL de CloudFront y...

KindaRails2Shell

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-file proof of concept and loopback-only Docker lab for the Rails Active Storage/libvips arbitrary-file-read vulnerability. It also demonstrates the advisory's conditional escalation from a recovered secretkeybase to a forged image variati...

grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 de Grafana, detecta automáticamente si hay vulnerabilidades, los plugins existentes, extrae claves, descifra el archivo db del servidor y genera información de datasourrce. Uso Proporciona funcionalidades de exp...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

rack-bug

Rack::Bug Code Climate Repositorio: http://github.com/brynary/rack-bug Descripción Rack::Bug añade una barra de herramientas de diagnóstico a las aplicaciones Rack. Cuando está habilitada, inyecta un div flotante que permite explorar el registro, las consultas a la base de datos, los tiempos de...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

redash-reset

redash-reset This will use a default REDASHSECRETKEY key of c292a0a3aa32397cdb050e233733900f this allows you to reset the password of the user ID but you will need to know the email address assocaited with it. Info https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv Setup...

Flask-Unsign

Flask Unsign Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys. For the standalone wordlist component, please visit the flask-unsign-wordlist repository. Requirements Python 3.6+ Installation To install the application, simply...

CVE-2025-10294

Exploit: Authentication Bypass via Empty ownidsharedsecret JWT Forgery 1 Forge a valid JWT using an empty HMAC key root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution

man-group/dtale 3.10.0 contains an authentication bypass and remote code execution caused by improper input validation and a hardcoded SECRETKEY in Flask configuration, letting attackers forge session cookies and execute arbitrary code, exploit requires attacker to access the application. id:...

CVE-2026-21994

CVE-2026-21994 Summary Oracle OKIT oci-designer-toolkit version 0.3.0 contains two critical misconfigurations that chain into an unauthenticated full takeover. A hardcoded Flask SECRETKEY exposed in the public repository allows any attacker to forge a valid admin session cookie — no credentials...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...

CVE-2021-40903

Título del Exploit: Antminer Monitor 0.5.0 - Bypass de Autenticación CVE: CVE-2021-40903 Fecha: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Autor del Exploit: CQR.company / Vulnz. Página del Vendedor: https://github.com/anselal/antminer-monitor,...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...