377549 matches found
n8n-CVE-2025-68613-exploit
n8n - CVE-2025-68613: Improper Control of Dynamically-Managed Code Resources Vulnerability n8n contains a critical Arbitrary Code Execution vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configurati...
kin
A new foundation for code. Kin is a graph-native code repository for AI agents and the people who build with them. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository...
CVE-2025-69599
CVE-2025-69599 author: Rafael JosΓ© NΓΊΓ±ez GulΓas company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...
nmap-spring4shell
Nmap-spring4shell Log4shell-nmap is an NSE script for detecting Spring4Shell RCE vulnerabilities CVE-2022-22965 in HTTP services. The script injects the correct payload into the application and then executes the following command on the specified endpoint. Vulnerability See here. Usage...
CVE-2026-111461
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...
CVE-2026-16521
An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...
BinAIVulHunter
BinAIVulHunter An IDA PRO plugin to help in finding vulnerabilites in binaries. Use IDA PRO HexRays decompiler with OpenAIChatGPT to find possible vulnerabilities in binaries Disclaimer, possible replies while trying to find binary vulnerabilites using an AI may lead to false positives, however i...
CVE-2019-0232
CVE-2019-0232 Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution RCE Video PoC available at https://www.youtube.com/watch?v=RA7kzuHOWqA Details Apache Tomcat has a vulnerability in the CGI Servlet, which can be exploited to achieve remot...
snoop
snoop A syscall tracer for Linux, built on eBPF. Like strace but with a live TUI, smart filters, and argument decoding you can actually read. $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/1234 read4,...
SSH-Stealer
RunAs-Stealer Smart keylogging capability to steal SSH Credentials including password & Private Key Usage The stolen credentials are written to C:\Users\Desktop\desktop.ini ADS log stream. To get the credentials type the cmd command: more \Desktop\desktop.ini:log" To remove the stored credentials...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell β CVE-2026-109618 / CVE-2026-109619 !CVSShttps:/...
gerobug
Gerobug: The First Open Source Bug Bounty Platform. Gerobug The first open source self-managed bug bounty platform. Are you a company, planning to have your own bug bounty program, with minimum budget? WE GOT YOU! We are aware that some organizations have had difficulty establishing their own bug...
CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-
π§ͺ STEP 1: Demo vulnerable web-app LAB We create logic similar to CVE-2025-55182 unsafe server-side execution. π vulnapp/app.py from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component" β VULNERABLE: user...
revshellgen
π RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features β’ Installation β’ Usage β’ Shell Types β’ Contributing π About RevShellGen is a powerful command-line tool that simplifies the process of generati...
DIRT
DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...
PowerMeta
PowerMeta PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them c...
-CVE-2023-33177-
Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. β οΈ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...
CVE-2026-65213 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...
CVE-2026-31156
CVE-2026-31156 There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information...
CVE-2017-9822
CVE-2017-9822 DotNetNuke Cookie Deserialization Remote Code Execution RCE DotNetNuke DNN versions between 5.0.0 - 9.3.0 are affected to deserialization vulnerability that leads to Remote Code Execution RCE. DotNetNuke uses the DNNPersonalization cookie to store anonymous usersβ personalization...