goBox

goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking file reads. -y val...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

CVE-2019-19781

CVE-2019-19781 Citrix Application Delivery Controller および Citrix Gateway におけるリモートコード実行 RCE Citrix Application Delivery Controller（ADC、旧 NetScaler ADC）および Citrix Gateway（旧 NetScaler Gateway）に脆弱性が確認されました。この脆弱性が悪用された場合、認証されていない攻撃者が任意のコード実行を行う可能性があります。 追記 : Fireeye による CVE-2019-19781 の侵害指標（IOC）スキャナー ...

EUVD-2026-91377

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomServicioPrestado” parameter is affected – endpoint “/es/providedservices/store”...

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Summary: This guide demonstrates how to chain two vulnerabilities in FreePBX 16 CVE-2025-57819 and CVE-2025-61678 to achieve a complete attack chain from unauthenticated access to Remote Code Execution RCE. Vulnerability / CVE Information CVE ID| Affected...

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules CVE-2026-33057 - Mesop 未认证 RCE PoC 和 yara 规则 说实话，我不确定它是否有效，可能不会有效，但你还是试试吧... BİO 和捐赠：https://guns.lol/hackpatato cve 简介：https://socradar.io/free-tools/cve-radar/CVE-2026-33057 和...

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr -u admin -p...

CVE-2021-22204

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...

gitjacker

gitjacker Gitjackerは、誤って.gitディレクトリがアップロードされたサイトからGitリポジトリをダウンロードし、その内容を抽出します。ディレクトリリスティングが無効になっている場合でも、リポジトリのかなりの部分を復元できます。 教育目的／ペネトレーションテスト専用に使用してください。 詳細情報: https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html インストール curl -s...

CVE-2022-26134

CVE-2022-26134 Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability Summary| CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability in Confluence Server and Data Center ---|--- Affected Products|...

EUVD-2026-91379

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”...

CVE-2026-59663

The Repasat application is susceptible to a Cross-Site Scripting (XSS) vulnerability. The flaw exists in the "nomDelegacion" parameter at the "/es/delegations/store" endpoint. If successfully exploited, an attacker could trick a user into executing arbitrary code within their web browser. No spec...

CVE-2024-23692

CVE-2024-23692 BURP POC GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nucleiテンプレート Exploit F5 BIG-IP iControl REST Auth Bypass RCE | コマンドパラメータ CVE-2022-1388 は、BIG-IP の iControl API の REST コンポーネントにおける認証バイパスの脆弱性であり、CVSSv3 スコア 9.8 が割り当てられています。iControl REST API は、BIG-IP デバイスの管理と設定に使用されます。CVE-2022-1388 は、BIG-IP を使用するデバイスの管理ポートまたはセルフ IP...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS Unauthenticated RCE via Auto-Login Bypass 📋 Overview CVE-2026-9198 is a critical unauthenticated Remote Code Execution RCE vulnerability in IBM Langflow OSS. This exploit chains two vulnerabilities: CVE-2026-9103 : Auto-login bypass that grants superuser JWT token...

LeakValue

Android 13 introduces many enhancements in order to harden Parcel serialization mechanism Here's presentation from Android Security and Privacy team on enhancements made That is great, definitely eliminates or makes unexploitable many vulnerabilities. Also they describe breaking my previous...

trivy-action

Trivy Action GitHub Action 用の Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense 目次 使用方法 CI パイプラインのスキャン CI パイプラインのスキャン（Trivy 設定ファイル使用） キャッシュ Trivy のセットアップ Tarball のスキャン テンプレートを使用した Trivy の利用 GitHub Code Scanning との併用 Git リポジトリのスキャン...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.4 Tested on newly installed Ubuntu 14.04 with PHP5 and Apache Specifically Debian/Ubuntu has been found to be vulnerable since they add the...

CVE-2026-64638

CVE-2026-64638 — XSS2Shell: WordPress Login Page Pre-Auth XSS → Server RCE HackSpeak distribution mirror. This repository is a distribution mirror of the educational XSS2Shell PoC CVE-2026-64638 released by WordSec , with code identical to upstream; upstream is MIT License, Copyright c 2026...