CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

CVE-2018-10949

Zimbra Collaboration User Enumeration Script CVE-2018-10949 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kali ./cve-2018-10949-user-enum.py --host...

misp-extractor

MISP Extractor Este código se conecta a un servidor MISP Malware Information Sharing Platform y analiza un número determinado de eventos, escribiendo las direcciones IP, URLs y hashes MD5 encontrados en los eventos en tres archivos separados. Uso Para usar este script, necesitarás proporcionar la...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Una vulnerabilidad de extracción de datos no autenticada en impresoras Kyocera, que permite recuperar la libreta de direcciones en texto claro y las contraseñas de dominio. Resumen de la vulnerabilidad A finales de 2021, durante una prueba de penetración, estaba experimentan...

CVE-2025-15474

BLE Smart Lock Denial-of-Service DoS Vulnerability An unauthenticated Bluetooth Low Energy BLE connection flood can reliably prevent legitimate users from unlocking the device by interrupting keypad input and forcing repeated lockout states. 📌 Summary This repository documents a Denial-of-Service...

binbloom

Acerca de El propósito de este proyecto es analizar un firmware binario crudo y determinar automáticamente algunas de sus características. Esta herramienta es compatible con todas las arquitecturas, ya que básicamente, solo realiza estadísticas simples sobre él. Características principales:...

docker-tor-hiddenservice-nginx

Crea y ejecuta servicios ocultos fácilmente Ejecuta fácilmente un servicio oculto dentro de la red Tor con este contenedor Genera la configuración esqueleto para tu servicio oculto, reemplaza por el nombre del patrón de tu servicio oculto. Por ejemplo, si deseas que tu servicio oculto contenga la...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

CVE-2026-21877

CVE-2026-21877 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod +x networkmonitor.py sudo docker compose up --build -d Firefox : http://localhost:5678 For test...

stylesmuggler

StyleSmuggler HTTP PoC Privates Forschungs-Repository für die ausschließlich HTTP-basierte Reproduktion von StyleSmuggler, CVE-2026-75650, gegen ein lokales Magento Open Source Lab. Die vollständige technische Analyse finden Sie in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. De...

CVE-2026-108594

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports...

CVE-2026-108594 Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports...

TekDefense-Automater

TekDefense-Automater Version: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater is a tool that I originally created to automate the OSINT analysis of IP addresses. It quickly grew and became a tool to do...

CVE-2022-4539

Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...

CVE-2023-50245

CVE-2023-50245 Vulnerability Overview CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer Vulnerability Vulnerability Description github advisories arbitrary address write vulnerability POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any...

CVE-2025-29279

CVE-2025-29279 To exploit this vulnerability, the attacker must insert the payload example.com;echo 'testing' into the "Host Address" in Traceroute6 Diagnostics in the Diagnostics section...

CVE-2018-13797

node-macaddress Retrieve MAC addresses in Linux, OS X, and Windows. A common misconception about MAC addresses is that every host had one MAC address, while a host may have multiple MAC addresses – since every network interface may have its own MAC address. This library allows to discover the MAC...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

ExecASLR-ekoparty

ExecASLR - Abusing Intel branch predictors to bypass ASLR What is ASLR Address Space Layout Randomization is a mitigation used to make harder to exploit memory corruption attacks. In a scenario of a buffer overflow vulnerability, for example, an attacker that tries to make a Return Oriented...