CVE-2023-22515

Confluence Vulnerability - CVE-2023-22515 📓 Introduction Atlassian was informed about a possible vulnerability that could be exploited and compromising the environment through administrative access. On October 4, 2023, Atlassian released a security advisory regarding CVE-2023-22515 which got a CV...

MetabaseRCE_CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 PoC A proof of concept of CVE-2023-38646, a Metabase exploit that allows user to do Remote Code Execution utilizing the setup token found in /api/session/properties to send a payload encoded in base64 Usage ./MetabaseRCECVE-2023-38646 -u target url -t target...

Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo-Vulnerability-Exploit-CVE-2019-14287 Sudo has been discovered to be unreliable, one of the most significant, powerful, and commonly used utilities installed in almost any Unix and Linux based operating system as a simple command. A pseudo security policy bypass flaw that allows arbitrary...

hackerEnv

Contáctame en: hackerEnv...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

betwixt

Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface. Installing Download the latest release for your operating system, build your own bundle or run Betwixt from the source code. Setting up In order to capture traffic, you'll have to direct it to...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

openvpn-install

openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...

CVE-2026-87766

CVE-2026-87766 is a symlink traversal vulnerability in bubblewrap , a sandboxing tool used by the containers project. During sandbox setup, creating files or directories under the new root can follow a parent symlink via /oldroot onto the host, allowing an attacker to write files at arbitrary pat...

EUVD-2026-74778

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766 Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...

signal-without-smartphone

Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. Note that Signal still requires a phone number to be used. This utility avoids the need of a smart phone, but will still require a way to t...

msfconsole-termux

msfconsole-termux How To Install Metasploit-Table on the Android Termux root@kitploit: pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP root@kitploit: msfconsole -q -x "use...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...