backdoor.mirai.helloworld

Dasan GPON Router URL ? when adding a string after image...

CVE-2022-22978

CVE-2022-22978: Spring Security Authorization Bypass Summary Spring Security framework is a security framework that provides authentication and authorization functions in Spring-based applications. In Spring Security versions 5.5.6, 5.6.3 and earlier, when using RegexRequestMatcher, a function th...

compaXSS

CompaXSS Bypass XSS Reflected Cross-site scripting ======= Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...

s3dns

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

url-regex-safe

url-regex-safe Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661cve for Node.js servers. Works in Node v14+ and browsers. Maintained for Spam Scannerspam-scanner and Forward Emailforward-email. Table of Contents Foreword...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code Execution RCE The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. The Driver...

CVE-2022-26134-Confluence

CVE-2022-26134-Confluence Put the URLs to be detected into target.txt Run the py script to write the vulnerable URLs into vul.txt...

CVE-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run with python3 cve-2020-7799.py Note: It is prohibited to use all resources of this project for illegal testing!...

CanaryTokenScanner

CanaryToken / HoneyToken Scanner Detect suspicious URLs including CanaryTokens inside Microsoft Office documents and PDFs. Supported formats: Office Open XML: .docx, .xlsx, .pptx .pdf .zip generic archives Why this exists CanaryTokens an HoneyTokens and other tracking or malicious URLs are often...

CVE-2023-42222

CVE-2023-42222 Vulnerability summary WebCatalog before version 48.4.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. This vulnerability allows an attacker to execute code on the victims machine by sending...

CVE-2020-8193

CVE-2020-8193...

Parth

Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...

FBIntelPy

FBIntelPy: Python Facebook Intelligence OSINT Search Tool FBIntelPy is a Python-based Facebook intelligence search tool that aims to assists in generating filtered Facebook URLs. This is was created for the upcoming TraceLabs Search Party 2026.02. This was inspired by IntelTechnqiue's web-based...

CVE-2026-15583

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-15583 CVE-2026-15583 Grafana MCP Server 0.17.0 - Grafana Labs I am @abraxasnull. Loopback lab. The client is CVE-2026-15583-Abraxas-Labs.py. Confused deputy. Unauthenticated MCP HTTP takes X-Grafana-URL from...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

SPY-MASKER

SPY-MASKER 🔥 SPY-MASKER It is a simple Python Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools to look the URL legit. ⚖️ Legal Disclaimer: FOR EDUCATIONAL PURPOSES ONLY Usage of SPY-MASKER for attacking targets without prio...

CVE-2022-30190

CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who...

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 Description Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs...

CVE-2020-24186-exploit

CVE-2020-24186-exploit Attack script for CVE-2020-24186 Exploit usage: Commands: Windows/Linux: python3 CVE-2020-24186.py -u -p Example: python3 CVE-2020-24186.py -u http://127.0.0.1 -p /wordpress/2022/04/04/hello-world...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticated authentication bypass caused by improper handling of URL encoding CWE-177 in the API session management layer. A crafted request reaches a privileged endpoint and is treated as an authenticated admin session. Overview The vulnerabilit...