346487 matches found
kernel-exploit-factory
kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...
CVE-2026-25099
CVE-2026-25099 - Bludit CMS API Unrestricted File Upload to RCE Description Bludit CMS versions before 3.18.4 allow an authenticated attacker with a valid API token to upload files of any type and extension via the POST /api/files/ endpoint. The uploadFile function performs no file extension or...
FortiSandbox-RCE-Exploit-CVE-2026-39808
FortiSandbox RCE Scanner β CVE-2026-39808 Unauthenticated OS Command Injection as root in Fortinet FortiSandbox Vulnerability β’ Installation β’ Usage β’ How It Works β’ Pipeline β’ Shodan Dorks β’ Disclaimer Vulnerability CVE-2026-39808 is a critical unauthenticated OS command injection vulnerability ...
iPwn
iPwn A Framework meant for the exploitation of iOS devices. REMEMBER: THE IPHONE YOU ARE ATTEMPTING TO GET INTO USING THIS TOOL MUST BE JAILBROKEN Status - β This project is still being worked on. I'm adding more extensions and options for post-exploitation for harvesting Device information and...
CVE-2021-34600
Original README below Proof of Concept for CVE-2021-34600 A detailed explanation of how this PoC works can be found within our blog post. On the user facing side we only added two new commands: hf 14a getchallenge and hf 14a opendoor . To make those work, we had to mix some code from the iceman...
reaver-wps-fork-t6x
Resumen Reaver implementa un ataque de fuerza bruta contra los PINs del registrador de Wifi Protected Setup WPS para recuperar contraseΓ±as WPA/WPA2 , como se describe en Fuerza bruta a Wi-Fi Protected Setup: cuando un mal diseΓ±o se encuentra con una mala implementaciΓ³n. por Stefan ViehbΓΆck. Reave...
reaver-wps-fork-t6x
Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan ViehbΓΆck. Reaver has been designed to be a robust an...
copy-fail-CVE-2026-31431
Vulnerability Description Root Cause In 2017, the Linux kernel crypto module authencesn introduced an in-place optimization for AEAD Authenticated Encryption with Associated Data operations. This optimization caused read-only pages in the page cache to be incorrectly placed into a writable...
CVE-2026-31431
CVE-2026-31431 β Local Privilege Escalation via AFALG 2026-04-29 β I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...
AzureRT
AzureRT Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based comman...
harpoon
Harpoon OSINT / Threat Intel CLI tool. Install Requirements As a pre-requesite for Harpoon, you need to install lxml requirements, on Debian/Ubuntu : sudo apt-get install libxml2-dev libxslt-dev python3-dev. On Fedora: sudo dnf install sqlite-devel automake bzip2 bzip2-devel bzip2-lib cython g++...
CVE-2026-24061
GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...
the-bastion
π The Bastion Resumen Los bastiones son un clΓΊster de mΓ‘quinas utilizadas como punto de entrada ΓΊnico por los equipos operativos como administradores de sistemas, desarrolladores, administradores de bases de datos, ... para conectarse de forma segura a dispositivos servidores, mΓ‘quinas virtuales,...
the-bastion
π The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...
CVE-2026-96745
A flaw was found in php-pecl-mongodb. In applications utilizing command monitoring, the driver deserializes class names embedded within document content when creating monitoring event objects. An unauthenticated remote attacker can exploit this flaw by providing crafted input during database...
zencart_auth_rce_poc
zencartauthrcepoc CVE-2021-3291 1- login as admin 2- get any modules edit page 3- inspect element any true radiobox 4- change true to true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- click update 6- to trig command go again edit page CVE-2021-3291 https://vulners.com/cve/CVE-2021-3291 POC...
ls-poc
CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...
Snaffler
Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own software to gain root access, the highest level of control over an Android phone. OnePlus told h...
msprobe
msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...