Keycloak 26.7.3 Username Takeover

Keycloak versions through 26.7.3 contain an improper authentication flaw in the first-broker-login flow that allows a matching external-provider username to lock a legitimate user out of their account...

CVE-2024-6043

CVE-2024-6043 CVE-2024-6043 CVE-2024-6043 Overview This Python tool exploits the CVE-2024-6043 vulnerability, which affects the SourceCodester Best House Rental Management System 1.0. The vulnerability allows remote attackers to perform SQL Injection via the adminclass.php file, specifically...

CVE-2022-31890

CVE-2022-31890 for osTicket | Support Ticketing System Nickname: python nickname.py The output of the first nickname in the table. Password: python password.py The output of the first password in the table. Output to file: python dumpFile.py cat dump.txt || nickname::password Output to console:...

cve-2011-2523-vsftpd-validation-lab

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Validation Lab ⚠️ Authorized Lab Only — conducted in an isolated VirtualBox Host-Only network using Kali Linux and Metasploitable2. No unauthorized systems were scanned or accessed at any point. Overview CVE-2011-2523 is one of the most well-known supply chain...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: $ git clone https://github.com/rly0nheart/osinteye.git $ cd...

metasploitable-pentest-lab

Exploitation of vulnerabilities in Metasploitable Complete cycle of a real attack on a controlled and isolated environment: lab preparation, reconnaissance with nmap, attack surface prioritization, mapping to CVE, exploitation with Metasploit, post-exploitation, credential extraction and cracking...

CVE-2024-57522

CVE-2024-57522 - Stored XSS Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0 Description This repository contains a Proof of Concept PoC for a Stored Cross-Site Scripting XSS vulnerability in the Packers and Movers Management System 1.0 by SourceCodester. The...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — PoC for CVE-2026-64638 Educational Proof of Concept for the XSS2Shell chain CVE-2026-64638, a pre-authentication XSS → RCE vulnerability in WordPress Core discovered independently by pwn.ai and disclosed on August 7, 2026. Table of contents 1. Executive Summary 2. Legal notice 3. Chai...

EUVD-2026-102783

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

RDPLinkEnum

RDPLinkEnum By querying the registry, you can view which hosts the current host has connected to and the user name information used when connecting Perform demo...

CVE-2026-107659

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.11 via the 'id post ID in /wp-json/wp/v2/modula-gallery/id or none for collection route' parameter. This makes it possible for...

smtp_userenum

smtpuserenum Help: python3 smtpuserenum.py -h Usage: python3 smtpuserenum.py You can change the username list:...

Namechk

! The tool no longer works properly. There are much better alternatives like Sherlock, Maigret or whatsmyname. Namechk Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks. Use: Search available username: ./namechk.sh -au Search available...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

PT-2026-115902

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could...

PT-2026-115914

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could...

PT-2026-115926

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could...

CVE-2025-8971

CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...

CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This repository hosts an automated Proof-of-Concept PoC exploit for CVE-2025-8550 , a reflected Cross‑Site Scripting XSS vulnerability in atjiu pybbs ≤ v6.0.0. It targets the /admin/topic/list endpoint’s username parameter, which lacks proper...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust the threshold...