CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...

CVE-2026-90852

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

LegacyHive

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...

CVE-2026-90857

SourceCodester College Notes Gallery Management System 1.0 is affected by an unrestricted file upload vulnerability in the Profile Upload component. The vulnerable endpoint is /dashboard/userprofile.php, where manipulation of the image argument allows an attacker to upload arbitrary files. The at...

EUVD-2026-78260

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

better_opts_attacks

May I have your attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks This repository contains code to run the ASTRA and ASTRA++ attacks that break SecAlign++, SecAlign, StruQ. This repository also contains some examples of generated attacks and attack...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

amlsec

Identificación Automatizada de Riesgos de Seguridad en Sistemas de Producción Ciberfísicos Utilizando Datos de Ingeniería Basados en AutomationML Este prototipo implementa los métodos presentados en las siguientes dos publicaciones: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated...

fern-wifi-cracker

Fern Wifi Cracker Fern Wifi Cracker es un programa de software de auditoría y ataque de seguridad inalámbrica escrito utilizando el Lenguaje de programación Python y la biblioteca Python Qt GUI. El programa es capaz de descifrar y recuperar claves WEP/WPA/WPS y también ejecutar otros ataques...

attack_range

Splunk Attack Range v5 El Splunk Attack Range construye entornos cloud instrumentados AWS, Azure, GCP, simula ataques y reenvía datos a Splunk para el desarrollo y pruebas de detección. Qué hace: Construye laboratorios — Despliega un laboratorio pequeño y similar a producción Splunk, servidores...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...

Get-RBCD-Threaded

Get-RBCD-Threaded Herramienta para descubrir rutas de ataque de delegación restringida basada en recursos en entornos de Active Directory Basada casi por completo en las maravillosas publicaciones de blog "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" ...

attack_monitor

Monitor de Ataques Attack Monitor es una aplicación Python escrita para mejorar las capacidades de monitoreo de seguridad de estaciones de trabajo/servidores de Windows 7/2008 y todas las versiones posteriores y para automatizar el análisis dinámico de malware. Modos actuales mutuamente...

Dop2Mop

Dop2Mop Un recolector OpenGraph de prueba de concepto para BloodHound que mapea rutas de ataque desde infraestructura DevOps hasta MLOps. Basado en Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure de Brett Hawkins @h4wkst3r. Tabla de Contenidos Agradecimientos Resumen...

CVE_Project

CVEProject Preparations for exploitation: 1.Install Tomcat 7 on the virtual machine sudo apt-get install tomcat7 2.If the first step is failed,set JDKDIRS="/usr/lib/jvm/java-8-oracle" and add the statements “export JAVAHOME=/usr/lib/jvm/java-8-oracle” and “export CATALINAHOME=/usr/share/tomcat7”...

CVE-2026-90856

SourceCodester College Notes Gallery Management System 1.0 is affected by an improper privilege management vulnerability in the Registration Flow component. The flaw resides in the signup.php file, where manipulation of the role argument allows a remote, unauthenticated attacker to gain elevated ...

CVE-2016-6210-exploit

CVE-2016-6210-exploit Exploit personalizado python 2.7 escrito para enumerar nombres de usuario según CVE-2016-6210 OpenSSH 7.2-p2 y anteriores solo debe usarse en sistemas autorizados DESCRIPCIÓN Escribí este programa como una herramienta para explotar CVE-2016-6210, que es una vulnerabilidad en...

Brutal

Ahora Teensy se puede usar para pentesting Teensy es como un rubber ducky, ¿por qué elegí Teensy? Porque el precio es muy barato para mí. Es extremadamente útil para ejecutar scripts en una máquina objetivo sin necesidad de interacción humano-teclado HID-ATTACK. Cuando insertas el dispositivo, se...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...