77287 matches found
POC-CVE-2025-6554
CVE-2025-6554 CVE-2025-6554 is a vulnerability in Chrome's V8 Engine JavaScript interpreter Hole Check 'inadequate control in unintended variables within expressions with optional chaining. POC CVE-2025-6554-POC.JS explores a flaw in the "Hole" verification mechanism in variables before use,...
magika
Magika Magika is a novel AI-powered file type detection tool that relies on the recent advance of deep learning to provide accurate detection. Under the hood, Magika employs a custom, highly optimized model that only weighs about a few MBs, and enables precise file identification within...
CVE-2020-15227
CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins This tool tests for vulnerability in nette/application. How to fix the vulnerability Composer Update dependency to...
CVE-2024-4577
CVE-2024-4577 Fixed and minimalist PoC of the CVE-2024-4577 I just tested some PoCs for this vulnerability, and a few of them were not working correctly, so I fixed it by creating my own non-intrusive and minimalist PoC to check if you are vulnerable. How to use: python3 CVE-2024-4577.py URL...
CVE-2024-24919-Sniper
CVE-2024-24919-Sniper Overview CVE-2024-24919 Sniper is a Python script designed to scan for Check Point Security Gateway Information Disclosure vulnerabilities. This script can perform both single-target and bulk scanning, utilizing multithreading to improve scanning speed. It supports various...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
RDPVulnarableCheck
This repository does not have a README...
MaliciousMacroGenerator
Malicious Macro Generator Utility Simple utility design to generate obfuscated macro that also include a AV / Sandboxes escape mechanism. Requirement Python 2.7 Usage MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage: MMG.py config output optional...
CVE-2022-21668-Pipenv-RCE-vulnerability
CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
copyfail-guard
copyfail-guard A zero-dependency Python CLI that checks whether a Linux host appears exposed to CVE-2026-31431 "Copy Fail" without running an exploit. It can also apply a conservative temporary mitigation when the affected component is loadable as a kernel module. Supports Debian/Ubuntu,...
CVE-2023-2002
Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...
cpanel-control-plane-exposure-check
cPanel Control Plane Exposure Check Lightweight security validation utility for identifying internet-exposed cPanel, WHM, and webmail administrative interfaces across external attack surfaces. The utility performs service validation, exposure classification, HTTP response analysis, and basic...
citrix-2025
Detection Script for Citrix NetScaler appliances Author: NCSC-NL !WARNING Some of these checks are meant to hunt for compromises, while other checks verify if you are compromised. Disclaimer These scripts are provided without any guarantees regarding its effectiveness. The detection capabilities ...
CVE-2024-3094-XZ-Utils-Check
JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...
CVE-2025-4631
π¨ CVE-2025-4631 - Profitori WordPress Plugin Privilege Escalation Exploit π Vulnerability Summary Profitori Plugin versions 2.0.6.0 to 2.1.1.3 is vulnerable to unauthenticated privilege escalation due to a missing capability check in the /wp-json/stocktend/v1/stocktendobject endpoint. This allows...
CVE-2026-25890-FileBrowser-Access-Control-Bypass
CVE-2026-25890 - FileBrowser Access Control Bypass Unauthenticated users cannot exploit this β requires valid low-privileged credentials that are restricted from the target path. Path-based authorization bypass in FileBrowser β€ v2.57.0 using multiple leading slashes //private instead of /private ...
CVE-2023-6000
CVE-2023-6000 PoC How does this detection method work? This template looks at the following path: /wp-content/plugins/popup-builder/readme.txt Based on the Stable Tag listed, if the version is prior to 4.2.3 then it is considered to be vulnerable. How do I run this script? 1. Download Nuclei from...
CVE-Exploit
Twitter: @0xAbbarhSF 1γCVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat xxx.html|grep -Eo 'https?://^ /+'|sort -u|xargs -I % python3...
DCOMrade
DCOMrade DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script...