347907 matches found
CVE-2025-26794-exploit
CVE-2025-26794: أداة استغلال حقن SQL في أمر ETRN بخادم Exim أداة استغلال من نوع إثبات المفهوم PoC لثغرة CVE-2025-26794، توضح ثغرة حقن SQL في خادم البريد Exim 4.98 عبر أمر ETRN عند استخدام تخزين SQLite DBM. ⚠️ إخلاء مسؤولية قانوني لأغراض اختبار الاختراق المصرح به فقط تم توفير هذه الأداة لأغراض...
CVE-2026-105401
A flaw was found in ImageMagick. A connecting client can transmit crafted data to the distributed pixel cache server, triggering a heap buffer overflow that overwrites memory. This issue can crash the server, resulting in a denial of service DoS...
CVE-2026-107292
A flaw was found in pydantic-ai. The web development chat server fails to validate incoming HTTP Host headers, allowing a remote attacker to achieve unauthorized tool execution and information disclosure. If a developer running the local development server visits a malicious website, an attacker...
CVE-2021-26855
CVE-2021-26855 CVE-2021-26855, also known as Proxylogon, is a server-side request forgery SSRF vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server. According to Orange Tsai, the researcher who discovered the vulnerabilities,...
CVE-2021-2302
CVE-2021-2302 Author: quynhle Gadget chain javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...
shadowd
Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...
HAFNIUM-IOC
HAFNIUM-IOC Hafnium-IOC is a simple PowerShell script that runs on Exchange servers to identify indicators of compromises IOCs from the Hafnium activity release by Mircosoft on 2021-03-02 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. The script may be...
CVE-2024-38077
CVE-2024-38077-EXP Fixed code based on pseudocode. Scope EXP: Windows Server 2025 POC: 08-25 Usage options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...
DeliberatelyVulnerableWebApp
تطبيق ويب ضعيف عمدًا Struts 2 هذا المشروع هو تطبيق ويب بلغة جافا يستخدم إطار عمل Struts 2. تم بناؤه باستخدام Maven ويمكن تشغيله باستخدام خادم Jetty. المتطلبات الأساسية مجموعة تطوير جافا JDK الإصدار 8 أو أعلى Apache Maven الإصدار 3.6.0 أو أعلى البدء بناء المشروع mvn clean install تشغيل المشروع...
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR مرحبًا، في هذا المختبر من LetsDefend تعمّقت في ثغرة يوم-الصفر الخاصة بـ SharePoint والتي تُسمى ToolShell CVE-2025-53770. ببساطة، حاكيت هجومًا واقعيًا حيث تجاوز طلب POST خبيث المصادقة، ونفّذ PowerShell لسرقة مفاتيح MachineKeySection،...
CVE-2026-97031
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...
DEBIAN-CVE-2026-78659
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
DEBIAN-CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
Explotando-FreeFloatFTP-CVE-2025-5548
Exploiting-FreeFloatFTP-CVE-2025-5548 Welcome to my exploit research and development repository. This project documents the full technical analysis, environment setup, and step-by-step exploitation of CVE-2025-5548 Stack-Based Buffer Overflow found in FreeFloat FTP Server. 🌱 Personal note: This...
react2shell-scanner
react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. 🚨 Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...
CVE-2025-55182
CVE-2025-55182 : React2Shell - Boîte à outils d'exécution de code à distance pour Next.js !AVERTISSEMENT Cet outil est fourni uniquement à des fins de tests autorisés et d'éducation. L'accès non autorisé au réseau et l'exfiltration de données sont illégaux. Les utilisateurs sont responsables de...
SNet
SNet 日本語版はこちら / Japanese version A CTF where you use AI to capture the flag. No pentesting experience? No problem. Claude Code acts as your personal trainer — it sets up the environment, teaches you the tools, and guides you through real attack techniques step by step. You type every command...