Detect_polyfill_CVE-2024-38537-

DetectpolyfillCVE-2024-38537 Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy CSP header of a given web application. Steps: 1.Save the modified script checkcspfromfile.py in the same directory as your urls.txt file. 2.Run the script using pyth...

CVE-2025-55182-analysis

Technical Analysis of CVE-2025-55182: My Research Journey ⚠️ Important Disclaimer This document describes my personal research process into CVE-2025-55182, including confirmed findings and experiments I carried out. This represents an honest account of my investigation, including initial incorrect...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

Evasor

Overview The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including...

CVE-2026-91097-CVE-2026-91106

🔬 Join Telegram for the latest vulnerability research and exploit releases HPLIP Printer Application — Unauthenticated Admin Takeover Mass exploitation tool targeting the HPLIP Printer Application PAPPL-based web interface in all HPLIP versions before 3.26.6. The tool exploits the default...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

OffensiveNotion

OffensiveNotion Notion yes, the notetaking app as a C2. A collaboration by: Documentation | Pull Requests | Issues !Pull...

HellRaiser

HellRaiser Vulnerability Scanner Install HellRaiser depends on cve-search API. Have a cve-search API running and add the address in config/config.yml on cvesearchapidomain field. Install ruby 2.7.2, bundler 1.17.3 and rails. https://gorails.com/setup/ubuntu/20.04 Install redis-server and nmap. su...

CVE-2026-108088

This vulnerability affects all versions of Apache Cocoon , which is a retired project. The issue is a cross-user cache poisoning (CWE-524) where cached values containing sensitive information from one user could be served to other users in a multi-user application. Because the project is retired,...

CVE-2026-108088 Apache Cocoon: Cross-user cache poisoning

UNSUPPORTED WHEN ASSIGNED Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users. This issue affects Apache Cocoon: all versions. As this project ...

CVE-2024-34102

CVE-2024-34102 Usage python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Traversal Pre-authenticated path traversal in the UniFi Network Application guest portal /guest/s/site/login. The pageerror query parameter is passed to a resource loader without validation, allowing an unauthenticated attacker to read fil...

CVE-2024-34958

CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

CVE-2019-6447-in-Mobile-Application

CVE-2019-6447-in-Mobile-Application In this research report you can get completly idea about the CVE 2019-6447 in the real world application and explotations with example. If you want to created video for the exploitation please use below mentions link...

WhatWaf

WhatWaf? WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass or two for said firewall, on the specified target. SIDE-NOTE: Any issue that is not the...

CVE-2021-33558.

CVE : CVE-2021-33558. Exploit code of CVE-2021-33558 Summary In Boa/0.94.13 there is various misconfiguration.it expose various senstive information. Proof of Concept https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js https://target.com/log.html...

log4shell-homework9

Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...

DVWA-ZAP-PENTEST

DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...

Vuln_Exploitation_MegaQuagga_Pentest

Vulnerability Exploitation — MegaQuagga Penetration Test Report Analyst: Samuel Weiss Organization: 0x2A Security Date: April 20, 2026 Client: MegaQuagga Publishing Target: www.megaquagga.local Classification: CONFIDENTIAL Overview This project documents a structured penetration test conducted...