CVE-2025-8110

CVE-2025-8110 Gogs Repository Symlink Remote Code Execution Made by oguiii Table of Contents Overview Features Requirements Installation Usage Exploit Workflow Technical Analysis Proof of Concept Demo Affected Versions Mitigation Detection Disclaimer License Overview CVE-2025-8110 is a critical...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

esperto-wiimote

Esperto Wiimote !IMPORTANT This software requires an updated/fixed Wiimote kernel driver found here. After installation, run sudo sed -i '/ATTRinhibited="1"/s/^//' /etc/udev/rules.d/99-wiimote.rules to un-inhibit IR and accelerometer events. Based on the esperto input system, esperto-wiimote is a...

Malicious code in agent-vx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f0a2b273b0361ffd4057f114f1be1eaf9469c9746d2737a21947905570ff80 On import agentaix, the package's init.py runs a top-level installmanage side effect that renames a bundled readme.txt into manage.py and launches it...

MAL-2026-17755 Malicious code in agent-vx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f0a2b273b0361ffd4057f114f1be1eaf9469c9746d2737a21947905570ff80 On import agentaix, the package's init.py runs a top-level installmanage side effect that renames a bundled readme.txt into manage.py and launches it...

CVE-2026-0073

🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...

vsftpd-2.3.4---Backdoor-Command-Execution

vsftpd-2.3.4---Backdoor-Command-Execution vsftpd 2.3.4 CVE-2011-2523 a critical vulnerability that leads to Root Shell. In this repo I will do a PoC of how to exploit it step by step, Manually & Automatically Python for educational purposes. What is the vulnerability about ? Firstlly, it is a...

CVE-2025-4796

CVE-2025-4796 Eventin Once the email is changed to an attacker-controlled address, the standard WordPress password reset flow can be used to take over the account. 🧰 Script PoC Filename: CVE-2025-4796.py This script automates the steps: 1. Log in to the target WordPress site using supplied...

React2Shell-Kingdom

React CVE-2025-55182 Vulnerability Demonstration Project ⚠️ SECURITY WARNING This project demonstrates a critical RCE vulnerability CVE-2025-55182 / React2Shell in React Server Components 19.1.1. FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY NEVER deploy to production or expose to untrusted...

CVE-2023-32353-PoC

CVE-2023-32353 Proof of Concept Disclaimer This proof of concept code is published for educational purposes. It should encourage other people to find similar vulnerabilities, report them responsibly and fix them. On May 23, 2023, Apple has published a fix for the vulnerability. You are encouraged...

Log4j-Vulnerability

🔓 Log4Shell Vulnerability Demonstration CVE-2021-44228 This project is a controlled test environment allowing you to reproduce and understand the critical Log4Shell vulnerability CVE-2021-44228 affecting the Apache Log4j library. 📁 Project Architecture Secutp1/ ├── Dockerfile Docker image build ├...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team. Feature| How It Helps ---|--- Connect your agents| Plug in OpenAI, Anthropic, or custom agents Set goals & budgets| Assign work, cap costs, define success Watch in real-time| See wha...

CVE-2021-32156

..| CSRF to RCE CRON |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

RedEye

RedEye : Red Team C2 Log Visualization ⚠️ This Repo Currently in Maintenance Mode ⚠️ This GitHub repository is no longer under active development. We'll review community issues and pull requests for bug fixes, but won't consider any new feature additions. RedEye is an open-source analytic tool...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE Protocol reverse-engineered Unofficial. This document describes the Bluetooth Low Energy BLE protocol of the CMF Watch Pro 2 CMF by Nothing, reconstructed by reverse engineering for an alternative companion app. It is not affiliated with or endorsed by Nothing/CMF. Use at yo...

payloads

payloads Git All the Payloads! Eine Sammlung von Web-Angriffs-Payloads. Pull-Requests sind willkommen! Verwendung Führe ./get.sh aus, um externe Payloads herunterzuladen und komprimierte Payload-Dateien zu entpacken. Payload-Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

phantom-grid

⬡ Phantom Grid Free, open-source Burp Collaborator alternative for penetration testing labs Out-of-Band OOB interaction capture · HTTP/HTTPS · DNS · SQLite · Exfil reassembly What is this? Phantom Grid is a self-hosted OOB Out-of-Band interaction capture tool — a free alternative to Burp...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2012-5321

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2012-5321 Run bellow command to check CVE-2012-5321 -h Configurations 2. We integrated with the Telegram API to receive...