CVE-2025-61162

A flaw was found in Cohere North AI. This incorrect access control vulnerability allows a remote attacker to send a specially crafted request to a specific API endpoint. This action enables the attacker to arbitrarily overwrite user information. The primary impact is unauthorized modification of...

whatfiles

whatfiles Whatfiles 是一个 Linux 工具，用于记录其他程序在你的系统上读取、写入、创建或删除的文件。它还会追踪目标进程创建的任何新进程和线程。 设计原理： 长期以来，我一直对缺乏一个简单的工具来查看进程从 main 到退出期间访问了哪些文件感到沮丧。无论你是不信任软件供应商，还是担心恶意软件，能够知道程序或安装程序对你的系统做了什么非常重要。lsof 只能观察一个时间点，而 strace 体积较大且有些复杂。 示例输出： root@kitploit: mode: read, file:...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Docker images verifier cli-tool CVE-2018-8115 To help the community stay safe, we at Aqua created an open source tool that...

Zygotroller

Zygotroller Remove profile owners/Family Link on ANY pre June 2024 Developer Mode device Android 12+ Zygotroller is a proof-of-concept that can remove a profile owner and associated restrictions with CVE-2024-31317's Zygote injection bug. It requires developer mode and the latest security patch t...

HAProxy-Keepalived-Sec-HighLoads

HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...

exploit-CVE-2016-10034

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

cve-2011-3026-firefox

cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

CVE-2021-26855-Scanner

CVE-2021-26855-Scanner Scanner and PoC for CVE-2021-26855 Credit to GreyOrder for the PoC. Reuploading for convenience and because Microsoft took it down at least once : Example of usage for mass scanning: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d...

zeek-plugin-roca

Johanna::ROCA This plugin implements detection of CVE-2017-15361 keys; it is a reimplementation of the source available at https://github.com/crocs-muni/roca. This plugin provides two new BIFs that can check public keys: rocavulnerablecert checks if a certificate is vulnerable rocavulnerablemod...

CVE-2019-9673

CVE-2019-9673: Freenet content filter vulnerability NOTE: I have fully disclosed this bug to the Freenet team and worked with them to verify their patch. The patch is now deployed in the latest version of Freenet. I've recently found a security vulnerability in Freenet that may allow an attacker ...

CVE-2024-3273

D-Link NAS Command Execution Exploit This Python script exploits a vulnerability CVE-2024-3273 in D-Link NAS devices, allowing arbitrary command execution. It leverages the vulnerability to execute commands remotely on the affected devices. Features Executes arbitrary commands on D-Link NAS...

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CloudScraper

CloudScraper is a Tool to spider and scrape targets in search of cloud resources. Plug in a URL and it will spider and search the source of spidered pages for strings such as 's3.amazonaws.com', 'windows.net' and 'digitaloceanspaces'. AWS, Azure, Digital Ocean resources are currently supported...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

VAPT Report on SMB Exploitation in Windows 10 Finance Endpoint This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 EternalBlue on a Windows 10 machine within a finance-oriented infrastructure. 🔐 Introduction...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ Disclosure Status: All findings in this repository were submitted to the HPE Networking Bug Bounty Program Bugcrowd between May–June 2026. Five of six submissions were closed as "Not Applicable" at triage level without technical reconciliation of the submitted evidence. No fixes have been issue...

external_zlib-1.2.7_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

wmi-static-spoofer

wmi-static-spoofer Motivation: The initial motivation is bypassing HWID detection methods used by intrusive software like anti-cheats, etc. or licensing restrictions implemented in software. The concept is not new but other solutions require a loaded driver at all times and a kernel hook with...