CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

CVE-2026-112057

A flaw was found in libdvdnav. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking a user into opening a specially crafted DVD or disc image. When the library parses chapters from a disc declaring an oversized title index, it performs an out-of-bounds read beyond...

cve-2026-67363-67364

Balbooa Forms pre-auth RCE + Payment Tampering CVE-2026-67364 / CVE-2026-67363 PoC and detection templates for two pre-auth vulnerabilities in Balbooa Forms combaforms for Joomla, fixed in 2.4.3.2. CVE-2026-67364 — Pre-auth PHP Code Injection - RCE CVSS 9.8 CVE-2026-67363 — Pre-auth Payment Amoun...

cve-2016-1555

Description The module leverages an unauthenticated arbitrary command execution vulnerability in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0. The vulnerability occurs within how the router handles POST requests from 1...

CVE-2022-1388

CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage To Check against single host URL python3 exploit.py -v true -u targeturl To Attack host and test command on this host python3 exploit.py -a true -u targeturl -c command Attack list of hosts or attaching file of host URL's IP...

CVE-2026-80844

CVE-2026-80844 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

ebpfmon

ebpfmon ebpfmon is a tool for monitoring eBPF programs. It is designed to be used with bpftool from the linux kernel. ebpfmon is a TUI terminal UI application written in Go that allows you to do real-time monitoring of eBPF programs. Installation eBPFmon can be built from source or there is a...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows Multiple OS command injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

CVE-2024-24386

VitalPBX - CVE-2024-24386 Vulnerability Title: Command Injection Author: Erick Duarte Version: 3.2.5-2 The vulnerability occurs when using the Task Manager module in conjunction with Cron Profile. To exploit this vulnerability, we need to place a script in a specific folder within the OS. The...

CVE-2025-31161

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection and exploitation tool for CVE-2025-31161 vulnerability in vulnerable CrushFTP versions. CVE-2025-31161 is a critical authentication bypass vulnerability in the CrushFTP Web Interface. By manipulating the HTTP Authorization header, an...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

squidmagic

Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies pip install -r requirements.txt Usage python squidmagic.py /squid/access.log | | | | / |/ | | | | ...

CVE-2025-34161

Field| Value ---|--- CVE ID| CVE-2025-34161 Affected| Coolify = v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Command Injection Summary Coolify versions prior to and including...

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

copyfail-fix

CopyFail-Fix 🌐 English | Português | Español | 中文 | Íslenska One-command mitigation and patch for CVE-2026-31431 — the Linux kernel "Copy Fail" local privilege escalation vulnerability. The script disables the affected algifaead module, upgrades your kernel via apt, and optionally installs a...

CVE-2025-29927

Introduction Bypass Next.js middleware authentication mechanism by forging the x-middleware-subrequest request header, allowing unauthorized access to protected routes. Environment setup Source code derived from P神, Next.js version 15.2.2 For Next.js 15.x, this issue is fixed in 15.2.3...

CVE-2024-36401_Geoserver_RCE_POC

Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...

LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC A Bash script to automate Local File Inclusion LFI attacks on vulnerable aiohttp servers, specifically targeting CVE-2024-23334. This exploit allows for unauthorized access to arbitrary files on systems running affected versions of aiohttp with improperly configured...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...