CVE-2025-44148

CVE-2025-44148 - Cross-Site Scripting Reflejado XSS Reflejado Cross-Site Scripting Reflejado XSS en MailEnable Proveedor: MailEnable Pty. Ltd. Versiones Afectadas: 10 Descripción Existe una vulnerabilidad de cross-site scripting reflejado XSS en MailEnable Webmail debido a una sanitización...

CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details Component name ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Vulnerable version = 1.4.8 Component slug elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Component link...

mortar

Mortar Loader Red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption PE/Shellcode inside the memory streams and execute it leveraging several injection techniques . Mortar is able to bypass modern anti-viru...

recaptcha

Description This repository contains a technical analysis of Google's antibot reCAPTCHA focusing on: Payload Structure and Values Fingerprinting Techniques Obfuscation Techniques Anti-debugging/Tampering Techniques Virtual Machines Contact Discord: @grecaptcha Telegram: @lyxlobyx Obfuscation...

Tentacle

Tentacle .. . . .. | || || \ | | | | / \ / || | | | 1.0.0stable ---| |----| | | | | ---| |---- / ^ \ | ,----'| | | | | | | | | . | | | / /\ \ | | | | | | | | | | | |\ | | | / \ | ----.| ----.| | || |||| | || // \ ||||| http://www.orleven.com Tentacle is a POC vulnerability verification and...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

CVE-2021-24741

CVE-2021-24741 Múltiples Inyecciones SQL Sin autenticación en Support Board v 3.3.3 Descripción Support Board V 3.3.3 Múltiples vulnerabilidades de Inyección SQL en Support Board Versión 3.3.3 que permiten a un atacante remoto no autenticado ejecutar comandos SQL arbitrarios a través de los...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

CVE-2025-55182-research

CVE-2025-55182 - RCE en React Server Components NOTA: Escrito por IA/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 es una vulnerabilidad crítica de RCE en el Flight Protocol de React. La cadena de ataque combina path traversal + inyección de chunk falso + abuso del...

CVE-2019-13496

CVE-2019-13496 Título del exploit: Bypass de OTP verificación de integridad fallida Fecha: 07/10/2019 Autor del exploit: Furqan Khan Página principal del proveedor: https://www.oneidentity.com/ Enlace del software: https://www.oneidentity.com/products/cloud-access-manager/ Versión: 8.1.3 Probado...

sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

HellHall

HellsHall - Another Way To Fetch Clean Syscalls HellsHall is a combination of HellsGate and indirect syscalls. How it works First, HellsHall checks whether the syscall address is hooked and tries to retrieve the syscall number by checking the presence of the following bytes: 0x4C, 0x8B, 0xD1, 0xB...

RootHelper

RootHelper Roothelper will aid in the process of privilege escalation on a Linux system that has been compromised. The latest version totals eleven scripts. From enumeration to exploit suggestion to exploit deployment. RootHelper ensures you have access to the best tools for the job. The credits...

Jump-over-ASLR-BTB

Branch Predictors & ASLR Author: Byte Reaper Description This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization ASLR. Requirements : Linux...

scan4all

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features Free one id Multi-target web netcat for reverse shell What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red te...

CVE-2026-108768

A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...

AzureGoat

AzureGoat: Una infraestructura Azure vulnerable a propósito Comprometer la infraestructura en la nube de una organización es como sentarse sobre una mina de oro para los atacantes. Y a veces, una simple mala configuración o una vulnerabilidad en aplicaciones web es todo lo que un atacante necesit...

MsfMania

MsfMania MsfMania es un avanzado framework de ofuscación de payloads basado en Python, diseñado para evadir la detección de EDR/AV en sistemas Windows. Genera ejecutables altamente polimórficos mediante generación dinámica de código, cifrado multicapa RC4 y suplantación de metadatos binarios. ⚠️...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock Según la descripción detallada de CVE-2023-21768 publicada por Microsoft Security Response Center MSRC, la vulnerabilidad existe en el Ancillary Function Driver AFD, cuyo nombre de archivo en el sistema es afd.sys. El módulo AFD es el...

Steganography

Steganography Table of Contents Installation Byte Sequence Manipulation WavSteg LSBSteg StegDetect If you are unfamiliar with steganography techniques, I have also written a basic overview of the field in Steganography: Hiding Data Inside Data. Installation This project is on PyPI and can be...