browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

react2shell-poc

React2Shell - CVE-2025-55182 PoC Proof of Concept for CVE-2025-55182 , a critical unauthenticated Remote Code Execution vulnerability in React Server Components. CVSS Score: 10.0 Critical Vulnerability The vulnerability exists in React's Flight protocol deserializer. By exploiting prototype...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

webauthn_tpm_portable

WebAuthn TPM Portable Credentials ⚠️ Early proof of concept. This project has not been thoroughly tested or audited. Do not use it for anything beyond experimentation. Portable, hardware-backed WebAuthn/passkey credentials that work across multiple devices using TPM 2.0. Traditional TPM credential...

cryptohackapp

cryptohackapp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

primefaces

From the Table to the Code: A Journey Through the RCE Vulnerability in POS for Restaurants This time we accidentally came across a vulnerability present in several POS applications for restaurants XETUX, which is a solution for restaurant monitoring and automation. In Panama, it is a widely used...

cve-2016-20012

CVE-2016-20012 SSH Username Enumeration Script This Python script attempts to enumerate valid usernames on an SSH server by trying to connect with an invalid password. It measures the response time for each username to identify possible valid accounts based on server behavior. Table of Contents...

IonStack-S22U

CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | While this repository originated as a device-specific port for the Galaxy S22 Ultra, the project has since shifted and expanded to support all Samsung...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: OS command injection via runnmapscan The runnmapscan MCP tool builds its command by string interpolation of the target and additionalFlags parameters and runs it through childprocess.exec, i.e. /bin/sh -c. ⚠ Read this first — duplicate identifier This vulnerabili...

database-sentinel

🛡️ Database Sentinel Security audits for your database backend. Ask "audit my database" and get a scored report with exact fix code. Works as a Claude Skill Supabase, MongoDB, a read-only MCP server for any AI client, or a CLI agent that uses your own model both Supabase. →MCP server setup and...

CVE-2024-10914

CVE-2024-10914 A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads t...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2025-9074-PoC

Docker API Unauthenticated RCE CVE-2025-9074 A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet 192.168.65.7:2375. The issue persists regardless of Enhanced Container Isolation ECI or TCP...

CVE-2021-3831

PHP Exploit CVE-2021-3831 Script Overview This PHP script is designed to interact with a target website by generating specific MD5 hashes and making HTTP requests to exploit potential vulnerabilities. It is intended for educational purposes and should only be used in environments where you have...

CVE-2021-26258

This repo contains tools and supplementary files for CVE-2021-26258 PoC. See the blogpost for details of the vuln. List of files : rn.stg.original: original .stg file that comes with Intel Killer rn.xml.original: .xml file extracted from rn.stg.original by using rnstg-tool rncustom.xml: custom .x...

watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309

CVE-2025-54309 A CrushFTP Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action python3 watchTowr-vs-CrushFTP-CVE-2025-54309.py http://127.0.0.1:8082 Generated new c2f value: 6XDQ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ /...

CVE-2024-26581-Checker

CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...

CVE-2024-6387

OpenSSH CVE Scanner The OpenSSH CVE Scanner is a Python script designed to scan multiple SSH targets for vulnerabilities based on their OpenSSH version. It utilizes threading for concurrent scanning and integrates logging with colored output for enhanced visibility. Features Multi-threaded...