ProxyLogon

ProxyLogon Original PoC: https://github.com/testanull How to use: python proxylogon.py Example: python proxylogon.py primary [email protected] If successful you will be dropped into a webshell. exit or quit to escape from the webshell or ctrl+c By default, it will create a file test.aspx. Th...

wildfly-ejb: wildfly-iiop-openjdk: EAP IIOP listeners may permit unauthed deserialization

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and dependi...

org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

shannon

!NOTE php2shell upgrade verification: confirm your PHP apps are patched against the php2shell RCE chain with the experimental --exp-php2shell probe. See the test results. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, a...

ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

CVE-2026-123783

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

CVE-2026-123675 OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

CVE-2026-123675

A code injection vulnerability exists in the Code Executor Tool of OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). The flaw is located in the execute_code function within im_client/agents/tools/code_executor.py, where improper handling of the filename/lang argu...

EUVD-2026-118307

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

redamon

Unmask the hidden before the world does RedAmon is an open-source, self-hosted AI penetration testing framework that maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens pull requests that fix what it finds. From first packet to...

CVE-2026-121881 Posit Workbench code-server session-state RPC (get_last_seen) SQL injection

SQL injection vulnerability in the getlastseen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitation requires a valid authenticated sessio...

CVE-2026-121881

An SQL injection vulnerability exists in the get_last_seen code-server session-state RPC of Posit Workbench (versions before 2026.08.0 ) by Posit Software, PBC. The flaw is caused by improper handling of the sessionIds parameter, which allows authenticated users to read arbitrary data from the Wo...

mkPIVM

Read the research paper written for 1.0.0. mkPIVM is a polymorphic position-independent shellcode virtualizer for Windows x86 and x64 Linux soon. Feed it raw shellcode. It emits another raw blob: a small virtual machine that interprets a lifted, encrypted-at-rest version of your original...

CVE-2026-123783

Skyvern versions through 1.0.56 are vulnerable to a sandbox bypass that allows authenticated users to execute arbitrary code. The root cause is the ability to reconstruct functions from raw bytecode using types.CodeType. By exploiting this, attackers can bypass the is_safe_script_code AST denylis...

EUVD-2026-118301

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-123783 Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

TrueConf Server Code Execution

The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

DIAFAN.CMS SQL Injection

The vulnerability in the DIAFAN.CMS content management system is related to improper handling of SQL query structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...