44361 matches found
PT-2026-116008
PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view...
heartbleedscanner
Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...
AGAS
An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems This is the official code to the paper: "An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems". This paper introduces AGAS, which is an LLM-driven shilling attack against black-box...
cve-2021-4034
Already compiled CVE-2021-4034 exploits for x8664 systems If systems are patched or already updated, you will see help section of pkexec...
CVE-2026-61702
The OpenPrinting CUPS system (prior to version 2.4.20 ) is vulnerable to a root-side banner file disclosure due to a path traversal flaw in scheduler/ipp.c. The copy_banner() function fails to properly sanitize the attacker-controlled IPP attributes-natural-language value used as a directory comp...
pkexec-exploit
pkexec-exploit Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Summary Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones Exploit...
ufuzz
UFuzz, or Universal Plug and Fuzz, is an automatic UPnP fuzzing tool. It will enumerate all UPnP endpoints on the network, find the available services and fuzz them. It also has the capability to fuzz HTTP using Burp proxy logs. It is designed to fuzz embedded systems, and as such, is only single...
CVE-2024-3094-One-Liner
CVE-2024-3094 One Liner Vulnerability Checker This repository provides simple yet powerful one-liner scripts designed to help you quickly determine if your server is vulnerable to CVE-2024-3094, a critical security vulnerability found in certain versions of the xz utility. Additionally, we offer ...
CVE-2025-41646---Critical-Authentication-Bypass-
CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...
vercel-april2026-incident-response
Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...
Log4J-Exploits
Log4J-Exploits Log4J Exploits for Different Systems...
Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution
Atlassian Crowd and Crowd Data Center is susceptible to a remote code execution vulnerability because the pdkinstall development plugin is incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit...
CVE-2022-24122
CVE-2022-24122 Simple Denial of Service using CVE-2022-24122 It works with 1 core system and it has 80% probability of success with 2 cores...
CVE-2026-98390
The Linux kernel contains a vulnerability where a divide by zero error can occur on certain virtualized systems, specifically Xen PVH dom0 . The issue arises because the underlying topology code on Xen can result in a roots_per_node value of 0 when num_nodes is 2 and num_roots is 1. This causes a...
CVE-2026-98390
In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate rootspernode as 0, which crashes with a divid...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
CVE-2026-87863
An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...
IoT-PT-v1
🛠️ IoT-PT OS v1 Internet of Things Penetration Testing OS - Version 1 📦 What is IoT-PT OS v1? IoT-PT OS v1 is a penetration testing virtual machine designed specifically for IoT security assessments. It includes pre-configured tools, scripts, and environments tailored for firmware analysis,...
