sccmsqlclient

sccmsqlclient A dedicated MSSQL client for SCCM database exploration and exploitation. Recon queries Run PowerShell scripts on managed clients Extract secrets Installation PIPX $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP You can install by cloning the repository and...

CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a...

EagleEye

EagleEye - host-based IDS and network monitoring system This is project needs a lot of work to be ready to use as it's my graduation project so it's not user-friendly, only for experienced users, beta version, and I published/made it only for educational purposes! EagleEye consists of two parts:...

square__retrofit_CVE-2018-1000850_2-4-0

Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: implementation 'com.squareup.retrofit2:retrofit:2.4.0' Snapshots of the development...

suds

OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...

CVE-2017-9606

CVE-2017-9606 Due to insufficient of checking integrity, authenticity and low user rights on update folder local user can craft fake ViPNet update files with arbitrary execution code and place them in ViPNet update folder. After placing fake update files in ViPNet update folder, ViPNet update...

ReverseSock5Proxy

Reverse TCP Sock5 Proxy A tiny Reverse Sock5 Proxy Server The Server GUI Built with ImGui :V U can download a prebuilt from Releases. Build You need gcc version 12+ recommended one for windows Conan Package Manager And run any script from the scripts folder, depend on your needs :V Client/Agent...

CVE-2023-38041-POC

CVE-2023-38041-POC Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept...

CVE-2026-35616

CVE-2026-35616 Author: wa6n3r | GitHub | Web Description Exploitation of the certificate chain verification bypass vulnerability in the Fortinet API. The script automatically discovers valid Common Names CN from various sources, generates a fake client certificate, and performs requests to...

python-inquestlabs

RETIRED November 2025 inquestlabs A Pythonic interface and command line tool for interacting with the InQuest Labs API. Note that an API key is not required to interact with this API. An API key does provide the ability to increase their lookback, remove rate limitations, and download available...

POC_CVE-2020-2555

POCCVE-2020-2555 poc for CVE-2020-2555 3 part: Client & Server: to build object and send to Server, trigger gadgetchain. Use it for build owner object. Attack: send object via T3 protocol with pwntools...

Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

vex-repo-spec

VEX Repository Specification v0.1 VEX Repository Specification v0.1 1. Versioning 2. Repository Manifest 2.1 Overview 2.2 File Location 2.3 Schema 2.4 Example 2.5 Field Descriptions and Usage Notes Main Fields Versions Subfields Locations Subfields 3. Repository Structure 3.1 File Structure 3.2...

Amazon Linux 2 : libXtst (ALAS-2026-4012)

The version of libXtst installed on the remote host is prior to 1.2.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4012 advisory. An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attach...

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. Affected versions of the OAuth client credentials providers do not expose the authorization-server issuer that owns pre-registered credentials. An untrusted or compromised MCP server can...

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

Summary ClientIPFromXFF skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Request.RemoteAddr belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose the clie...

GHSA-J6QF-3M9C-VWJ3 chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

Summary ClientIPFromXFF skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Request.RemoteAddr belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose the clie...

CVE-2026-75524 OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.2, an attacker overbooks an agent, placing multiple appointments into a single time slot that the system is designed to keep exclusive. The number of overlapping...

CVE-2026-75524

The OpenReception appointment booking software (versions prior to 2.2.2 ) is vulnerable to a race condition (CWE-367) in its add-to-tunnel and create-new-client functions. An attacker can exploit this to overbook an agent by placing multiple appointments into a single time slot that should remain...