NTP_Trojan

NTPTrojan Über Reverse NTP Remote Access Trojaner in Python, für Penetrationstester. Weitere Informationen zur Roadmap und Inspiration finden Sie unter: http://lockboxx.blogspot.com/2015/04/python-ntp-trojan.html Referenzen Der Server basiert stark auf: https://github.com/limifly/ntpserver...

React2shell-CVE-2025-55182-Exploit

Questo repository non contiene un README...

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" Usa l'opzione -K di njclient.py per visualizzare la tua arte ASCII l33t al momento della connessione riuscita. Esempi...

proftpd-mod_copy-cve-2015-3306

ProFTPD 1.3.5 modcopy Sicherheitslücke CVE-2015-3306 Dieses Repository enthält den Laborbericht zur Ausnutzung eines anfälligen ProFTPD 1.3.5-Dienstes auf der Hackviser-Plattform. Das Labor demonstriert den unbefugten Zugriff auf eine vertrauliche Datei secret.txt unter Verwendung der...

cs50-cyber-paloalto-oauth

Progetto Finale di Cybersecurity CS50 Titolo: La violazione OAuth di Salesloft e CVE-2024-3400 impatto Palo Alto Autore: Yafiya Darwesh GitHub: Yafiah-Darwesh Video YouTube: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 File presentation.pdf — diapositive script.txt — note p...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

CVE-2023-33477

CVE-2023-33477 Der Harmonic NSG 9000-6G-Modulator weist eine Schwachstelle für unbefugte Downloads in der Konfigurationsdatei config.exp auf Aufgrund der fehlenden Zugriffsberechtigungsprüfung für die Datei „cgi.bin/config.exp" in diesem Modulatormodell kann jeder Benutzer bei einer Fernverbindun...

CVE-2021-3560

CVE-2021-3560 - Polkit Lokale Privilegienausweitung ⚠️ Nur für Bildungszwecke und autorisierte Sicherheitsforschung Ursprüngliche Exploit-Autoren Vielen Dank an den ursprünglichen PoC-Autor @UNICORDev von @NicPWNs und @Dev-Yeoj Beschreibung Es wurde festgestellt, dass Polkit dazu gebracht werden...

CVE-2025-15260

CVE-2025-15260: Autorização Ausente / Controle de Acesso Quebrado no Plugin - MyRewards – Pontos de Fidelidade e Recompensas para WooCommerce Aviso: Este repositório foi criado apenas para fins educacionais e divulgação ética. A vulnerabilidade foi reportada de forma responsável ao fornecedor e...

CVE-2026-78477 Jawn <= 1.4.2 - Unauthenticated Privilege Escalation

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

EUVD-2026-65300

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

CVE-2026-78477

The Jawn theme for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 1.4.2 , allowing an attacker to gain administrator-level access . The CVSS 3.1 base score is 9.8 (Critical) , reflecting network-accessible, low-complexity exploitation with no r...

CVE-2026-78466

The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.0.11 , caused by missing validation on a user-controlled key. Authenticated attackers with Subscriber-level access or above can perform an unauthorized action. The CV...

CVE-2026-78466

...

EUVD-2026-65299

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

CVE-2026-78467

The Fluent Support Pro WordPress plugin is affected by a missing capability check on a function, present in all versions up to and including 2.3.1 . An authenticated attacker with Subscriber-level access or higher can perform an unauthorized action, resulting in a low integrity impact. The CVSS 3...

EUVD-2026-65302

The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...

CVE-2026-78467

...

CVE-2025-52689-PoC

CVE-2025-52689 PoC-Code PoC-Code für die Sicherheitslücke CVE-2025-52689 im Alcatel-Lucent Enterprise AP1361D WLAN-Zugangspunkt Authentication Bypass. Dieser POC wurde für den Wettbewerb SpiritCyber 2024 entwickelt, der während der Singapore International Cyber Week 2024 stattfand. Nutzung 1...

CVE-2025-9215

StoreEngine Potente Plugin WordPress eCommerce per Pagamenti, Membership, Affiliati, Vendite e Altro = 1.4.0 - Download Arbitrario di File Autenticato Subscriber+ Il plugin StoreEngine contiene una vulnerabilità nella sua funzionalità di Import/Export CSV che consente a qualsiasi utente autentica...