shell-history-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install shell-history-leaks Run bellow command to check shell-history-leaks -h Configurations 2. We integrated with the Telegram API to...

openredirect

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install openredirect Run bellow command to check openredirect -h Configurations 2. We integrated with the Telegram API to receive insta...

laravel-ignition-Rxss

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install laravel-ignition-rxss Run bellow command to check laravel-ignition-rxss -h Configurations 2. We integrated with the Telegram AP...

CVE-2026-28289

🚨 CVE-2026-28289 — “Mail2Shell” Zero-Click Unauthenticated RCE in FreeScout via Email Attachment Bypass 📖 Overview CVE-2026-28289 , nicknamed Mail2Shell , is a critical zero-click Remote Code Execution RCE vulnerability affecting FreeScout. An attacker can send a specially crafted email to a...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoam...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis Before you start reading , i have to do this announcement : PLEASE TAKE EVERYTHING YOUR READ WITH A PINCH OF SALT AS I'M NO WHERE A SymbianOS developer or anything familiar with SymbianOS environment But why ev...

Zimbra-CVE-2026-73570-Rules

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Detection rules for CVE-2026-73570 , an OS command injection in Zimbra Collaboration Suite via the SNMP trap notification parameter snmpnotify. Vulnerability Field| Detail ---|--- CVE| CVE-2026-73570 Type| OS command injection Affected| Zimbr...

CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC Unauthenticated RCE vulnerability in Fuel CMS 1.4.1. The filter parameter in the /fuel/pages/select/ endpoint is passed unsanitized to a eval call in the PHP backend, allowing arbitrary code execution via a crafted payload. Unlike blind...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase Critical Sandbox Escape Unauthenticated / Low-Privilege → Root Remote Code Execution in NocoBase 📌 Overview CVE-2026-34156 is a critical sandbox escape vulnerability in NocoBase an open-source no-code/low-code platform. An attacker with the ability to create or execute...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-20245 is a privilege escalation vulnerability in the CLI of Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst SD-WAN Manage...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

artemis

Let AI assistants and test suites use real phones like a human. English • 中文文档 • Workflow Showcase • Quick Start • MCP for IDEs • Benchmarks • Discord Community Live Demo: Setup driving routes and calculate total durations in Google Maps, then open YouTube to play a Coldplay song. Key Highlights...

libextractor-ole2-rce

CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 Summary A stack-based buffer overflow in GNU libextractor's OLE2 plugin allows remote denial of service crash and code execution when processing a crafted .doc file. The vulnerability is in processstaroffice ole2extractor.c:349 which...

idalib-cli

️ idalib-cli Agent-native CLI for the IDA Pro IDALib — every command takes one -d/--db flag, every answer is JSON. English · 中文 ✨ Features 🗄️ Stateless — pass -d/--db a binary or an .i64; no daemon, no session bookkeeping. 💾 Persistent IDB state — the IDB file is the state: comments, bookmarks,...

CVE-2026-19975

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CAPEsolo

Python GUI to run capemon in standalone VM. Provides a subset of CAPE Configuration And Payload Extraction processing and results. The Interface Tabs across the top: Start, then one per result view Info, Behavior, Signatures, Payloads, Yara, Configs, Strings, Debugger, JS Log, Network. The Start...

CVE-2026-18351

CVE-2026-18351 Mass exploit tool for CVE-2026-18351 — Unauthenticated Arbitrary File Upload → RCE in Drag and Drop File Upload for Elementor Forms credit johenlastgen | telegram @johenlastgen | channel @jlgnetworkredirect Features Passive vulnerability probe no upload Full exploit mode with shell...

neko-master

Neko Master See your network traffic clearly. Real-time monitoring · Traffic auditing · Multi-gateway support English | 中文 !IMPORTANT Disclaimer This project is a traffic analysis and visualization tool for local gateway environments. It does not provide any network access service, proxy...

tugtainer-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-crjc-6vc7-xrfh. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-tugtainer-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440 Advisory|...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...