CVE-2026-128078

GLPI is a free asset and IT management software package. From 9.5.0 until 10.0.27 and 11.0.9, authenticated users could access ITIL followups, tasks, or solutions generated from templates without a read-permission check on the parent ticket, problem, or change. Depending on the template...

CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python script is an exploit for CVE-2024-24919, a CVE that hitted Check Point Products: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versions: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80....

smm_usbrt_poc

UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...

MalScan

MalScan MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 A Check Point Remote Access VPN IKEv1 certificate-authentication bypass Detection Artefact Generator. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e See our blog post for technical details. Detection in Action $ python3...

CVE-2025-20352

CVE-2025-20352 SNMP Exposure Check onesixtyone + parser Fast, safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP subsystem: 1. Scan your subnets for SNMP using onesixtyone with default communities. 2. Parse sysDescr.0 banners with a small Python script to fl...

EUVD-2026-125432

CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attesting endpoint can alter workload code,...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements python3 Python Pacakges = requests, Fakeuseragent,...

Elph Mobile Unverified Code Upload

The vulnerability in the Elph Mobile unified communications platform is related to code loading without proper integrity checks. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

ai-code-review

🔍 codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install · Quick Start · Usage · Providers · Contributing What It Does codereview sends your code to an LLM and returns a...

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

heartbleedchecker-chrome

This repository does not have a README...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

dtrace-memaccess_cve-2020-27949

Reading and writing memory of other processes using fasttrap The /dev/fasttrap device for creating trap nodes in user-space processes for the pid and objc providers has the permissions 666. In contrast to /dev/dtrace, which is also 666, fasttrap lacks a permission check. This allows any process t...

OSIPs

OSIPs This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the I...

yatas

YATAS Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something...

CVE-2021-21985

CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname vCenter3: python3...

CVE-2019-14287-

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...