CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool أداة استغلال قوية لاكتشاف واستغلال الثغرة CVE-2025-55182 في مكونات خادم React من Next.js. تتيح هذه الأداة تنفيذ الأوامر عن بُعد RCE في تطبيقات Next.js الضعيفة مع قدرات مدمجة لتجاوز جدران الحماية WAF. نظرة عامة CVE-2025-55182 هي ثغرة أمنية حرجة في مكونات خادم React من Next....

CVE-2025-49113_exploit_cookies

CVE-2025-49113 - ثغرة تنفيذ التعليمات البرمجية عن بُعد في Roundcube Webmail نظرة عامة تقنية CVE-2025-49113 هي ثغرة حرجة في إلغاء التسلسل غير الآمن في Roundcube Webmail تتيح تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة. تنشأ الثغرة من التعامل غير السليم مع كائنات PHP المسلسلة أثناء عمليات رفع...

EUVD-2026-92089

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2026-103355

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 2.0.20 . The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to ...

CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 ggit में कमांड इंजेक्शन भेद्यता ggit स्वयं को इस प्रकार वर्णित करता है: Local promise-returning git command wrappers संसाधन: प्रोजेक्ट का GitHub स्रोत कोड: https://github.com/bahmutov/ggit प्रोजेक्ट का npm पैकेज: https://www.npmjs.com/package/ggit इस भेद्यता पर लेख:...

CVE-2023-50564

CVE-2023-50564 CVE-2023-50564, Pluck CMS v4.7.18 में एक RCE कमजोरी है। यह /inc/modulesinstall.php कंपोनेंट में एक मनमानी फ़ाइल अपलोड कमजोरी के माध्यम से संभव है, जो एक दुर्भावनापूर्ण .zip फ़ाइल अपलोड करके मनमाना कोड निष्पादित करने की अनुमति देती है। उपयोग एक्सप्लॉइट चलाने से पहले, /login.php पर...

paint2die

सबसे सरल और सबसे विश्वसनीय RichFaces Paint2DResource CVE-2018-12533 RF-14310 शोषण स्थापना • उपयोग • Paint2Die चलाना स्थापना निर्देश git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt उपयोग ./paint2die -h यह टूल के लिए सहायता...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki अप्रमाणित RCE एक्सप्लॉइट प्रभावित XWiki संस्करण संस्करण 15.10.11 संस्करण 16.4.1 संस्करण 16.5.0RC1 भेद्यता विवरण प्रभावित XWiki संस्करणों में SolrSearch मैक्रो में असुरक्षित Groovy अभिव्यक्ति हैंडलिंग के कारण रिमोट कोड निष्पादन भेद्यता शामिल है। अप्रमाणित हमलावर दूरस्थ रूप...

CVE-2026-68820

cve-id تبرع ادعم صيانة هذا المشروع عبر PayPal أو بمسح رمز QR أدناه. ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرَّح بها مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات معامل معزولة بيئات اختبار الاختراق المصرَّح بها مثال على الإعداد: git clone cd Project use python follow...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

CVE-2026-53413

cve-id تبرع ادعم صيانة هذا المشروع عبر PayPal أو بمسح رمز الاستجابة السريعة أدناه. ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرّح بها، مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار الاختراق المصرّح بها مثال على الإعداد: git clone cd Project...

custom-oscp-tooling

Custom OSCP Tooling A consolidated set of read-only, OSCP-exam-safe custom tools by Samson Laird. Everything here enumerates, identifies, and advises. Nothing here exploits, sprays, or modifies a target. The problem this solves OSCP exam and lab work is a list of disconnected one-liners: nmap her...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...