CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

web

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. 🚧 ⚠️ Work in progress; Not ready for use,yet ⚠️ 🚧 Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...

ZeroScout

🦅 ZeroScout The Autonomous Local & Cloud Threat Hunter "Don't just scan files. Visualize the battlefield." 🇹🇷 Türkçe Dökümantasyon İçin Tıklayın Read in Turkish 🚀 What is ZeroScout? ZeroScout is a next-generation threat hunting framework designed for Incident Responders DFIR , SOC Analysts , and...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth POC for CVE-2018-4327 atleast I think so since CVE-2018-4327 and CVE-2018-4330 were both written about by @SparkZheng but it does not say which once relates to which bug but since he described this one first then I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4...

CVE-2025-6558-exp

CVE-2025-6558 - Google Chrome ANGLE/GPU Sandbox Escape...

honeypotscan

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🛡️ HoneypotScan Check if a token is a scam before you buy Free, fast, and accurate...

CVE-2025-25257

CVE-2025-25257 - FortiWeb Vulnerability Checker & Exploit A Python-based tool for checking and exploiting CVE-2025-25257 vulnerability in FortiWeb devices. This vulnerability allows SQL injection and remote code execution through a crafted Authorization header. 📋 Description CVE-2025-25257 is a...

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

CVE-2020-27301-hostapd

CVE-2020-27301-hostapd Rogue AP PoC for CVE-2020-27301 Build On Ubuntu 20.04 LTS root@kitploit: apt install libnl-genl-3-dev libssl-dev libsqlite3-dev libgnutls28-dev cd hostapd && make -j4 all Run In the hostapd directory, use root@kitploit: ./start.sh hostapd README wpasupplicant and hostapd...

API-SPY-API-PROBE

API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this code...

drupal-cve-2019-6339

drupal-cve-2019-6339 Drupal remote code execution vulnerabilty...

cve-2023-20198

cve-2023-20198 Description. 1vere$k POC on the CVE-2023-20198 based on the Blog. Also including a check on hexademical response according to the original Cisco article. The script works in the two modes: check mode which is just makes a connection for the particular URL and checks a response code...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

CVE-2019-19383

CVE-2019-19383 FreeFTPd 1.0.8 Post-Authentication Buffer Overflow via "SIZE" command. This exploit is published as-is for raising security awareness in the public interest, and educational purposes. Do not use this code for criminal activity...

seer snap-latest

Introduction Seer - a gui frontend to gdb for Linux. Ernie Pasveer [email protected] This project is actively worked on. The aim is a simple, yet pleasing gui to gdb. Please report any bugs or desired features to my email or create a task in my GitHub project page. Installation Seer can be...

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote access trojans RATs...

CVE-2023-23752

CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Usage To use this code, you can follow these steps: 1. Clone this repository or...