React2Shell

⚛️ React2Shell CVE-2025-55182 Advanced Exploitation Toolkit for Next.js Server Actions CVE-2025-55182. React2Shell is a powerful, interactive shell wrapper designed to exploit the React2Shell vulnerability. It goes beyond simple RCE by providing command history, file transfer capabilities, and...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

PoC-AutoSync

🧠 PoC-AutoSync-Github Automatically collects public Proof-of-Concept PoC exploits from poc-in-github.motikan2010.net and keeps the database up to date with automatic updates. Use responsibly — for research and defensive purposes only. Inspired by nomi-sec/PoC-in-GitHub. 🔍 Overview This repository...

PcapPlusPlus

PcapPlusPlus es una biblioteca multiplataforma de C++ para la captura, el análisis y la creación de paquetes de red. Está diseñada para ser eficiente, potente y fácil de usar. PcapPlusPlus ofrece capacidades de decodificación y forjado para una gran variedad de protocolos de red. También...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your use ...

gha-lab-ba981941f0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of dedupeio/dedupe at commit...

gha-lab-e8902eccd3

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of timescale/pgai at commit...

CVE-2026-33367

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

EUVD-2026-95812

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

CVE-2026-33367

The Red Lion Controls N-Tron 700 Series is vulnerable to a missing authentication flaw where SNMP can be used to perform administrative actions. Attackers can retrieve configuration files, modify user accounts or device settings, and initiate firmware or bootloader upgrades/downgrades without any...

CVE-2026-33367 Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication...

gha-lab-6926364d94

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of RSSNext/Folo at commit...

CVE-2021-38314

Unauthenticated Sensitive Information Disclosure CVE-2021-38314 Python exploit for CVE-2021-38314 Use: python3 cve-2021-38314.py http://www.target.com The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users ...

CVE-2026-106581

Before version 4.92.0 , Docker Desktop for Windows failed to verify the cryptographic signature of packages provided via the Docker Desktop Installer.exe install -package command. This vulnerability allows an attacker who can provide a crafted package and convince a user to approve a Docker-signe...

gha-lab-85f022290a

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of njzjz/wenxian at commit...

nowafpls

nowafpls Table of Contents nowafpls Documented WAF limitations Installing nowafpls Using nowafpls Authors License nowafpls Most web application firewalls WAFs have limitations for how much data they can process when a request body is sent. This means for HTTP requests that contain a request body...

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

bambdas

نصوص بامبدا Bambda scripts مرحبًا بكم في مستودع نصوص بامبدا الرسمي من PortSwigger. يحتوي هذا المستودع على مجموعة من النصوص التي طورتها كل من PortSwigger والمجتمع 🧡 📑 في هذه الصفحة أنواع نصوص بامبدا محتويات المستودع استيراد النصوص إلى بورب تحديث النصوص في مكتبتك المساهمة بنصوصك الخاصة الموارد أنوا...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...