WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

CVE-2023-34924

CVE-2023-34924 A buffer over flow vulnerability of H3CMagicB1STV100R012 router CVE info: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ID for the entr...

CVE-2022-0332

CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection POC GET...

CVE-2021-40438

CVE-2021-40438 build docker build -t cve-2021-40438:1.0 . run docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 ./main.sh...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

VeilTransfer

VeilTransfer 2.0 VeilTransfer is a data exfiltration utility designed to test and enhance detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture. By leveraging multip...

CVE-2023-23752

CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

CVE-2018-2636

Install $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory January 2018 - CVE-2018-2636...

CVE-2026-102076

A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...

CVE-2026-102073

A vulnerability exists in multiple APOGEE and TALON products, including APOGEE MBC (PPC), MEC (PPC), PXC Compact, PXC Modular, and TALON TC Compact/Modular across various BACnet and P2 Ethernet configurations. The root cause is an integer underflow (CWE-191) where the web service fails to properl...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

CVE-2026-87689

The Metasploit Framework Web Service REST API msf-ws exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updatecredential PUT and deletecredentials DELETE handler...

CVE-2026-87689 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

The Metasploit Framework Web Service REST API msf-ws exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updatecredential PUT and deletecredentials DELETE handler...

CVE-2026-87689

The Metasploit Framework Web Service REST API (msf-ws) contains a critical authentication bypass in the Msf::WebServices::CredentialServlet component. Specifically, the update_credential (PUT) and delete_credentials (DELETE) handlers for the /api/v1/credentials route omit the mandatory warden.aut...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Improper Access Control Samsung Printer SCX-6x55X Series SyncThru Web Service is affected by an improper access control vulnerability. The vulnerability can permit an attacker to gain access to a list of SMB users and passwords...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...