CVE-2025-49132

CVE-2025-49132 Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute...

CVE-2019-13051

Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...

CVE-2021-22192

CVE-2021-22192 CVE-2021-22192 Range: Unauthorized User RCE Vulnerability 0x10 Range Environment 0x20 Directory Structure CVE-2021-22192 ├── README.md ............... This README ├── imgs .................... Images for README ├── gitlab .................. Gitlab container mount directory │ ├──...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2016-10140-Zoneminder-Poc

ZoneMinder Unauthorized Access CVE-2016-10140 Poc -- Batch Verification Script Vulnerability Description ZoneMinder is an open-source video surveillance system. When abnormal events occur, you can receive email or SMS notifications. There is an information disclosure and authentication bypass...

CVE-2026-74037

Wazuh versions 4.0.0 before 4.14.8 are vulnerable to a Session Invalidation Bypass in the check_token function. The root cause is that the system fails to consult the blacklist when validating issued tokens for run_as users with zero static roles. This allows an attacker with revoked administrato...

CVE-2026-109959

EspoCRM versions 4.0.0 before 10.0.7 are vulnerable to an access control flaw. Authenticated users with stream access to a parent record can bypass the NoteAccessControl filter by requesting GET /Note/{id}. This allows them to read audited field values restricted by field-level security , specifi...

CVE-2026-109958

EspoCRM version 4.0.0 before 10.0.7 is vulnerable to an improper access control vulnerability. Authenticated users with record access can bypass field-level restrictions to read restricted emailAddress values via the address-book search API . This occurs even when specific Roles are configured to...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright :...

CVE-2026-90132

A flaw was found in the Linux kernel's NTFS filesystem. This vulnerability allows an unprivileged local user to bypass intended access controls by modifying reserved extended attributes xattrs, such as $LXUID, $LXGID, $LXMOD, and $LXDEV, through the setxattr function. This unauthorized modificati...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based “Less power. Same discipline.” RedRoot Lite is the restricted edition of RedRoot , designed to provide core red teaming functionality while keeping advanced modules locked. It uses the same architecture, same CLI style,...

CVE-2024-4040

Exploit Code for CVE-2024-4040 Overview This exploit code targets the CVE-2024-4040 vulnerability, allowing unauthorized access to user accounts by reading and validating tokens stored in the "sessions.obj" file. If the tokens are valid, hackers can gain entry to the targeted accounts. Unlike oth...

OllamaHound

OllamaHound Modular toolkit for discovering exposed Ollama servers, fingerprinting versions, and validating model access. OllamaHound is a modular, RedTeam oriented toolkit for discovering publicly exposed Ollama servers , fingerprinting versions, classifying CVE exposure , validating whether tex...

Android-Projector-C2-Malware

Pre-installed C2 Infrastructure and RAT Payload on Android Projectors Technical Analysis Report — Security Research Affected Devices: Multiple Android projectors of projector brands like the Nonete e.g., Model HY260Pro likely also several projectors from Magcubic, Hotack, Huyukang and many more, ...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

CVE-2021-36396 Exploit Description This repository holds a Python-based exploit targeting CVE-2021-36393, a severe vulnerability found within Moodle's recent courses feature. The flaw resides in the 'sort' parameter, enabling SQL injection attacks that can lead to unauthorized database access...

CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems Also if...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...

PXEThief

PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...

hush

Give your agents boundaries you can read. Get decisions you can verify. What · Quickstart · How it works · SDKs · CLI · Policies · Docs · Spec What is HushSpec? HushSpec is an open specification for the security controls an AI agent operates under. Write a policy in YAML, evaluate it in Rust,...