CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

selenium-wire

Selenium Wire non è più mantenuto. Grazie per il tuo supporto e per tutti i tuoi contributi. Selenium Wire Selenium Wire estende i binding Python di Selenium per darti accesso alle richieste sottostanti effettuate dal browser. Scrivi il tuo codice nello stesso modo in cui fai con Selenium, ma...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

cronicle-docker-hardcoded-secret-key-rce

Cronicle Docker Images: Hard-coded secretkey to Unauthenticat...

CVE-2020-10770-keycloak-exploit-poc

Keycloak Blind SSRF POC This is a step by step walk-through about how to test the Blind SSRF CVE-2020-10770 found by Lauritz Holtmann and documented in his blog post. He also briefly explained how to test it. This is just a more detailed explanation. All credits go to Lauritz. Setup I use Docker ...

CVE-2026-49097

camel-irc irc.sendTo Header Injection Reproducer CVE-2026-49097 This project demonstrates a message-header injection in Apache Camel's camel-irc component, tracked as CVE-2026-49097. IrcProducer reads the irc.sendTo header to choose the destination of the outgoing IRC message; when present it...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

platform_external_libvpx_v1.8.0_CVE-2023-5217

README - 31 January 2019 Welcome to the WebM VP8/VP9 Codec SDK! COMPILING THE APPLICATIONS/LIBRARIES: The build system used is similar to autotools. Building generally consists of "configuring" with your desired build options, then using GNU make to build the application. 1. Prerequisites All x86...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

qub-network-security-cve-2023-20198

🛡️ qub-network-security-cve-2023-20198 Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE 📘 Queen’s University Belfast – CSC3064 Network Security Assessment 📋 Assessment Overview This project involves analyzing PCAP files provided by Fox-IT to: Identify Indicators o...

PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 White Hat School 3rd term, Class 13, Baek Seung-hoon @shun1403 https://github.com/shun1403/PIL-CVE-2017-8291.git Environment: Ubuntu Linux Environment Setup Upgrade to V2 via sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin If...

CVE-2023-27163-lab

CVE-2023-27163 — Request-Baskets SSRF Lab Project: Vulnerability Research & Reproduction Lab — CVE-2023-27163 Author: Amulya Kaushik Role: Cybersecurity R&D & Lab Content Development Intern Candidate Server-Side Request Forgery in Request-Baskets ≤ 1.2.1 A self-contained local research lab for...

CVE-2025-64328_FreePBX-framework-Command-Injection

CVE-2025-64328 FreePBX Authenticated Command Injection in framework module Simple proof of concept repository for CVE-2025-64328 FreePBX Authenticated Command Injection in the framework module. Full writeup here: https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl pro...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

hoh4

Requirements: python Command: python laravel-ignition-rce.py ""...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

flask-session-cookie-manager

Decodificador/Codificador de Cookies de Sesión de Flask Autor original : Wilson Sumanang Autor de correcciones y mejoras : Alexandre ZANNI Importado desde saruberoz.github.io Dependencias Python 2 o Python 3 itsdangerous Flask Instalación Paquete BlackArch Linux pacman -S...

CVE-2021-3156

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability See report » Francesco Marchiori · Alessandro Lotto Table of Contents 1. Abstract 2. Visualization 3. Fuzzing 4. Exploit 5. Patch 🧩 Abstract Any Unix-based Operating System is equipped with the sudo command tha...

CVE-2026-39813

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...