Hacknetics

Hacknetics Hacknetics 🛡️ Owner: ice-wzl Contributors: ice-wzl, Jfox32199 Please consider donating: https://buymeacoffee.com/icewzl Description: Your one-stop reference for OSCP and Red Teaming! 🚀 This repository contains a curated collection of code snippets, guides, command syntax, and high-level...

malwinx

Malwinx A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it root@kitploit: pip install flask pip install pefile pip install requests Usage root@kitploit: $ python flaskapp.py Live Demo...

Java-springboot-codebase 1.1 - Arbitrary File Read

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

codesnippets_CVE-2020-8417

В этом репозитории нет README...

exploit-writing-for-oswe

OSWE를 위한 익스플로잇 작성 배경 무엇인가 이 저장소에는 OSWE 랩 및 자격증 시험에서 익스플로잇 스크립트를 작성하는 데 유용한 스니펫과 팁 목록이 포함되어 있습니다. 여기 있는 일부 예제는 특정 코딩 관행에 어긋날 수 있지만, 우리의 최종 목표는 익스플로잇 스크립트를 빠르고 정확하게 작성하는 것입니다. requests 라이브러리 사용에 익숙하지 않거나 Python이 처음이라면 코드 스니펫 섹션에서 시작하는 것이 좋습니다. 그렇지 않다면 재사용 가능한 코드 섹션이나 팁 섹션으로 건너뛰어도 됩니다. 왜 필요한가 자격증에 대...

vulnerable-code-snippets

취약한 코드 스니펫 취약점 | 프로그래밍 언어 | 취약한 코드 스니펫 실행 | 설치 | 업데이트 YesWeHack은 안전한 docker 환경에서 코드 분석을 연습할 수 있도록 다양한 취약점이 포함된 코드 스니펫을 제공합니다. 취약한 코드 스니펫은 모든 숙련도 수준에 적합합니다. Twitter @yeswehack에서 매주 금요일 새로운 취약한 코드 스니펫 을 공개합니다! 🗒 특별한 것을 보고 싶거나 취약한 코드 스니펫에 대한 아이디어가 있다면, 언제든지 아이디어를 설명하는 "New Issue"를 만들어 주세요. 어리석은 아이디어...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets 인터넷 곳곳에서 수집한 취약한 코드 스니펫 모음입니다. 다양한 블로그 게시물, 서적, 리소스 등에서 가져온 스니펫입니다. 저작권 침해를 의도하지 않았습니다. 참고: 이 코드 스니펫은 정적 분석 도구를 테스트하기에 좋은 벤치마크가 아닙니다. 누락된 import와 누락된 파일이 있는 손상된 코드 스니펫입니다...

PYSEC-2026-2506 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

Summary GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs...

CVE-2026-8832

The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...

EUVD-2026-32534

GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject...

CVE-2026-8832

The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

Summary GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS developed by Givan’s individual developers. It is used to build websites, blogs, or e-commerce stores. Versions of Vvveb prior to 1.0.8.2 contained security vulnerabilities. These vulnerabilities were caused by an issue with the password reset module, where...

Exploits-and-code-snippets

Exploits-and-code-snipp...

Exploits-and-code-snippets

Exploits-and-code-snipp...

Exploits-and-code-snippets

Exploits-and-code-snipp...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the Import Errors view. An authenticated attacker can access sensitive information, such as file paths, code snippets, or stack traces related to DAGs they are not authorized to access. Remediation Upgrade...

CVE-2026-1785

The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud snippet download and update actions in the CloudSearchListTable class. This makes it possible for unauthenticated...

CVE-2026-1785

The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud snippet download and update actions in the CloudSearchListTable class. This makes it possible for unauthenticated...

CVE-2026-1785

The CVE-2026-1785 entry concerns the Code Snippets plugin for WordPress, affected versions up to and including 3.9.4. The root cause is missing nonce validation on the cloud snippet download and update actions in the Cloud_Search_List_Table class, enabling Cross‑Site Request Forgery (CSRF). This ...