5761 matches found
easy-exploits
easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...
exim-cve-2019-10149-data
Exim CVE Data Collection Data Collection Related to Exim Vulnerabilities CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 CVE Announcement: https://vulners.com/cve/CVE-2019-10149 Exploit Details: https://www.exploit-db.com/exploits/46974 Issue Timeline: https://seclists.org/fulldisclosure/2019/Jun/...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era...
TOP
TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2019 year top total 30 2018 year top...
fil-c
Fil-C 0.684 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...
NocoBase - SQL Injection
NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...
NocoBase - SQL Injection
NocoBase versions prior to 2.0.39 contain a SQL injection vulnerability in the @nocobase/database package. The queryParentSQL function in eager-loading-tree.ts constructs a recursive CTE query by directly concatenating user-controlled primary key values into the SQL WHERE IN clause without...
rastrea2r
.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci pour la branche master .. image::...
cve-collector
CVE-Collector Simple recolector de las últimas CVE escrito en Python Existen varios métodos para recolectar información sobre las últimas CVE Common Vulnerabilities and Exposures. Este código fue creado para proporcionar orientación sobre cómo recolectar, qué información incluir y cómo codificar ...
SharpHound
SharpHound Получить SharpHound Последняя сборка SharpHound всегда доступна здесь. Чтобы определить версию SharpHound, совместимую с развёрнутым экземпляром BloodHound CE, войдите в веб-интерфейс BloodHound CE и нажмите ⚙️ Настройки → Download Collectors. Затем нажмите кнопку «Download SharpHound» ...
dismap
🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...
ssh-audit
ssh-audit ssh-audit ist ein Werkzeug zur Überprüfung von SSH-Servern. Funktionen Unterstützung für SSH1- und SSH2-Protokollserver; Banner auslesen, Gerät oder Software und Betriebssystem erkennen, Komprimierung erkennen; Algorithmen für Schlüsselaustausch, Host-Key, Verschlüsselung und Message...
dga-collection
Collezione DGA Una raccolta di noti Algoritmi di Generazione di Domini: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus Utilizzo Per ogni DGA, l'elenco dei domini può essere facilmente generato: root@kitploit: from datetime import date from Necurs import Necurs Compute domains for the current...
Hack Tools
Hack Tools Questo repository contiene una raccolta di oltre 200 strumenti e risorse che possono essere utili per attività di red teaming. Alcuni strumenti possono essere specificamente progettati per il red teaming, mentre altri sono più generici e possono essere adattati per l'uso in un contesto...
OSINT_Inception-links
OSINT Inception | Link 🔎 Link attuali funzionanti per le pagine Start.me elencate nel Progetto OSINT Inception Supporto della community ⛑️ Sentiti libero di aprire un'Issue o una PR Pull Request per qualsiasi link non funzionante. Anche se controllo regolarmente i link rotti e mantengo questo...
pipe-primitive
pipe-primitive An exploit primitive in linux kernel inspired by DirtyPipe CVE-2022-0847. A while ago, like many security veterans, I studied and reproduced the DirtyPipe CVE-2022-0847 vulnerability, and deeply felt how useful this bug is. It starts from an uninitialized memory issue and ends with...
CVE-2022-28077
CVE-2022-28077 Home Owners Collection Management System 1.0 - XSS Riflesso Exploit Title: Home Owners Collection Management System 1.0 - XSS Riflesso Date: 2022-05-06 CVE: CVE-2022-28077 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
CVE-2022-28078
CVE-2022-28077 Home Owners Collection Management System 1.0 - XSS riflesso Exploit Title: Home Owners Collection Management System 1.0 - XSS riflesso Data: 2022-05-06 CVE: CVE-2022-28078 Autore dell'exploit: Abdulaziz Saad @b4zb0z Homepage del fornitore: https://www.sourcecodester.com/ Link del...
Bootstrap-with-XSS
Raccolta di PoC per vulnerabilità storiche di Bootstrap Questa è una pagina HTML statica per scopi di studio e ricerca, che integra molteplici proof of concept PoC di vulnerabilità cross-site scripting XSS nella storia del framework Bootstrap. Questo progetto ha lo scopo di fornire a ricercatori ...