GitHound

GitHound Overview GitHound is a BloodHound OpenGraph collector for GitHub, designed to map your organization’s structure and permissions into a navigable attack‑path graph. It: Models Key GitHub Entities GHOrganization : Your GitHub org metadata GHUser : Individual user accounts in the org GHTeam...

CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-86804

An improper authorization vulnerability in seakee CPA-Manager-Plus versions up to 1.11.10 affects the CPAResource function in the file apps/manager-server/internal/http/controller/proxy/handler.go within the HTTP Handler component. An unauthenticated remote attacker can manipulate this handler to...

EUVD-2026-74049

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

CVE-2019-7482

Multiple Vulnerabilities in SonicWall SMA/SRA Appliances CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 First Published: 26 Feb 2020 14:00 GMT Status: Developing Last Updated: 26 Feb 2020 14:00 GMT CVSS Score: 9.8 Summary On 18 Dec 2019, SonicWall CSIRT...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final Base Image — CVE-2025-12543 Patch Overview This repository provides a Docker base image built on WildFly 11.0.0.Final with a backported fix for CVE-2025-12543 , a critical Host header validation vulnerability in Undertow. The image is intended to be provided to colleagues as ...

Heartbleed_Dockerfile_with_Nginx

Probando Heartbleed con Dockerfile de Nginx Este repositorio contiene el Dockerfile de Nginx con la versión vulnerable OpenSSL 1.0.1f para probar la vulnerabilidad CVE-2014-0160 Heartbleed. Imagen Base Docker debian:latest Instalación 1. Instala Docker Ejemplo con Debian: apt-get install -y docke...

CVE-2025-49144

Notepad++ Binary Planting PoC CVE-2025-49144 ⚠️ EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. 📋 Overview This Proof of Concept demonstrates the binar...

CVE-2025-14018

CVE-2025-14018: NetBT e-Fatura Privilege Escalation Vulnerability 📋 General Information Parameter| Value ---|--- CVE ID| CVE-2025-14018 Vulnerability Type| Local Privilege Escalation Unquoted Service Path CWE| CWE-428 Affected Product| NetBT e-Fatura Vulnerable Versions| 1.2.15 Exploit Author|...

CVE-2025-24813

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-24813, vulnerability in Apache Tomcat. The script has been modified based on the related link and tailored to my needs. Setup Vulnerable Tomcat Environment Given environment based on the official Tomcat 9.0.90 image. It removes the server's...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual validation script for CVE-2026-31431 "Copy Fail" — a Linux kernel local privilege escalation via algifaead page-cache write. Vulnerability CVE-2026-31431 is a logic bug in the Linux kernel's authencesn AEAD template. When combined with...

python-haystack

python-haystack memoria forense |travis| |coverage| |landscape| |pypi| |docs| Inicio rápido: Guía de uso rápido en la carpeta docs/. CLI de Haystack-reverse en la carpeta docs/. Más documentación Introducción: python-haystack es un framework de análisis de heap, enfocado en la búsqueda e ingenier...

PutScanner

🔍 PUT Directory Scanner A penetration testing tool that identifies writable web directories via HTTP PUT method, specifically designed to detect CVE-2025-24813 Arbitrary File Upload in Apache Tomcat. 📌 Features Smart Protocol Handling : Auto-detects HTTPS/HTTP with fallback Comprehensive Checks :...

CVE-2025-46822

CVE-2025-46822 ⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in...

CVE-2022-0185

CVE-2022-0185 Linux Kernel Privilege Escalation Escape toc Vulnerability Overview Vulnerability ID: CVE-2022-0185 CVSS Score: Affected Product: linux kernel - fsconfig syscall Affected Versions: linux kernel 5.1-rc1 5.16.2 Exploitation Requirements: Linux local; requires CAPSYSADMIN capability ca...