qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2026-52885

TOCTOU: HMAC Checks Disk, Executes from Memory Notepad++ v8.9.6.2 — Attacker-Controlled UserCommand Execution via HMAC Race Condition Advisory | ---|--- GHSA| GHSA-qm4c-qg8p-qfcr CVE| CVE-2026-52885 Severity| High Affected| v8.9.6.2 Patched| v8.9.6.4 Patch Commit| 4f7563c Affected File|...

CVE-2026-20253

Splunk Enterprise — CVE-2026-20253 Training Lab Splunk Enterprise 10.2.3 · PostgreSQL recovery sidecar · CWE-306 Missing Authentication for Critical Function An authorized, self-contained reproduction that models the real advisory for defensive education. It does not ship Splunk's proprietary cod...

CVE-2026-4885

CVE-2026-4885 Piotnet Addons for Elementor Pro Note: The exploit can only be triggered if a file field is added to the Piotnet form. INFO : CVE-2026-4885 CVSS Score : 9.8 Critical CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Versions : = 7.1.70 Patched : No patch available...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versions " image.jpg 4 Rename this file to image.php. 5 On the form page, upload the created image.php file. 6 Now, to run this file just access https://yoursite.com/assets/image.php Note: replacehttps://yoursite.com with the address of your test installation...

CVE-2018-7600

CVE-2018-7600 Drupalgeddon2 Exploit – Python3 DISCLAIMER: This project is for educational and authorized penetration testing purposes only. Do NOT use this code on systems you do not own or have explicit written permission to test. Unauthorized use is illegal and punishable by law. The author...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

STIG-Edge-RCE-CVE2025-9478

STIG – Microsoft Edge Chromium 139.0.3405.125 Remote Code Execution CVE-2025-9478, Plugin ID: 258091 Before Finding: Microsoft Edge version 139.0.3405.86 was outdated and vulnerable to a critical Remote Code Execution RCE flaw CVE-2025-9478. Risk: Attackers could exploit a use-after-free in ANGLE...

CVE-2026-6279.py

Description This Python script is an exploit tool for CVE-2026-6279 targeting Avada Builder = 3.15.2. Key behavior: scans targets for fusionloadnonce via Avada-specific shortcode/page patterns discovers AJAX endpoint and origin IP bypass if Cloudflare blocks admin-ajax builds exploit requests for...

sjet

sJET by siberas siberas JMX Exploitation Toolkit sJET allows an easy exploitation of insecure configured JMX services. Additional background information can be found here and here. Prerequisites Jython 2.7 Usage SJET implements a CLI interface using argparse: jython sjet.py targetHost targetPort...

CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...

pwn-hisilicon-dvr

= HiSilicon DVR hack Istvan Toth [email protected] v1.0, 2017-09-06 :source-highlighter: pygments :toc: preamble :toclevels: 5 :toc-title: Contents :imagewidth: 100% abstract This report discloses serious vulnerabilities with proof of concept PoC code of DVR/NVR devices built using the...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2025-59536

CVE-2025-59536 - the startup trust dialog implementation. Claude Vulnerability Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2025-10-03 Legal For authorized security testing only. Root Cause short version Claude Code is an agentic coding tool. Versions befor...

cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...

ace-vim-neovim

ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen nc -vlp 9999 2. ace vim pocshell.txt And then, your localhost will get shell...

CVE-2026-6271

CVE-2026-6271 — Career Section WordPress Plugin RCE Scanner Plugin: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary File Upload → Remote Code Execution Affected...

CVE-2018-7600

CVE-2018-7600 Only working on version 8, not 7. Install git clone https://github.com/0xAJ2K/CVE-2018-7600.git pip3 install -r requirements.txt python3 CVE-2018-7600.py Usage python3 CVE-2018-7600.py -u http://172.31.1.27 Expected output kali :: /opt/myscripts » ./CVE-2018-7600.py -u...

cve-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical Affected| = 0.211.0 RCE Fixed| 1.121.0 AFR / 1.120.4+ RCE Disclosed| 2026-01-07 11:09 UT...