372941 matches found
five-nights-at-follina-s
Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...
sift
Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...
CVE-2025-0108
Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
CVE-2026-41545 WebSocket timelapse path traversal and command injection
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
CVE-2026-41545 WebSocket timelapse path traversal and command injection
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
CVE-2017-0199
CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration. Release note:...
CVE-2026-42945_NginxRift
π NGINX Rift PoC Automation β CVE-2026-42945 PoC Automation Driver for RCE exploitation of thenginx-rift container Β· Target verification β Single-command exploit β Interactive reverse shell One command orchestrates the entire exploit flow β from container check to getting a shell. β οΈ Ethical &...
CVE-2024-28995
CVE-2024-28995 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are the responsibility of the user. The tool author assumes no responsibility. version = 15.4 NAME: Serv-U -...
CVE-2024-36104
CVE-2024-36104 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are solely the responsibility of the user. The tool author does not assume any responsibility. version = 18.12.14...
cybersecurity-struts2
Apache Struts2 Vulnerability | CVE-2017-5638 | Version 2.5 Disclaimer This is meant for educational, and research purposes only. I do not authorize or endorse any illegal or unethical use of this projects contents or information Instructions To run the webapp: java -jar ms-cybersecurity-1.jar use...
INPGer
INPGer | CVE-2022-4063 - InPost Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash inpger.sh yourlist.txt thread Reference...
CVE-2020-35476
CVE-2020-35476 A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Not finished and doesn't work. Most of the code is there but payload has to be fixed...
CVE-2022-42889
CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.10 which is vulnerable to CVE-2022-42889. Running the application Replace DemoApplication.java nc command by your host ip address. Listening with netcat: $ nc -l -p 30000 Build and run docker...
PanOsExploitMultitool
PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...
EVCer
EVCer | CVE-2023-0159 - Extensive VC Addons for WPBakery page builder Automatic Mass Tool for checking vulnerability in CVE-2023-0159 - Extensive VC Addons for WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bas...
WAGO-CVE-2023-1698
WAGO-CVE-2023-1698 WAGO System Remote Code Execution Vulnerability CVE-2023-1698 Attention I have developed a tool for local testing and POC development, which is for technical learning reference only. Please do not use it for illegal purposes. Any direct or indirect consequences and losses cause...
CVE-2022-22978
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher π₯Ά Overview According to the information I have gathered, this vulnerability relates to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...
argus-wp-watcher
Ethical WordPress vulnerability scanner β real-time CVE correlation, OWASP mapping, AI-powered analysis, and consent-based testing. Quick Start Β· Documentation Β· Docker Β· AI Features Β· Star on GitHub In Action Live scan Β· WordPress 6.0.3 Β· 49 CVEs detected Β· 18 findings...
VulnFanatic-NG
VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM β a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends β to judge whether...
ipchanger
IP CHANGER ππ A powerful Tor-based IP rotation CLI tool that automatically changes your public IP address at a specified interval and displays it in a clean terminal table. Built with β€οΈ by @CappricioSec β οΈ For educational and privacy testing purposes only. Do not misuse this tool for illegal...