cve-2026-9082

CVE-2026-9082 Type : SQL Injection CWE-89 Affected Product : Drupal Core Database Abstraction API Drupal Advisory : SA-CORE-2026-004 Published : May 20, 2026 Severity : Highly Critical Drupal 20/25 | NVD CVSS 6.5 What Is It? CVE-2026-9082 is a SQL Injection vulnerability in Drupal's core database...

raspi-corelight

Corelight@Home raspi-corelight v3.2 Configure the Pi to Run Corelight Software Sensor The Corelight Software Sensor is a 64-bit application, so we have created a configuration tool raspi-corelight to perform initial configuration of the sensor and Raspberry Pi OS. To install and run this tool,...

CVE-2026-22243

CVE-2026-22243: EGroupware has SQL Injection in Nextmatch Filter Processing Overview Field| Details ---|--- CVE ID| CVE-2026-22243 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products egroupware/egroupware versions: = 26.0.20251208, 26.0.20260113 CWE Classification...

MiniPlasma-Runner

MiniPlasma-Runner Modified version of Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adapted for C2 usage. Original PoC runs from disk only. This version runs entirely from memory via execute-assembly, with a split-binary approach to avoid detection. Disclaimer This tool is provided for authorized...

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

rdroid

This project is unmaintained as of now, but as I get time In next few months, probably, It will be fixed to work. rdroid Remotely manage your android phone AKA RAT ! History! I worked on this project during highschool, in year 2011-2012. Since, I wasn't familier with versioning systems, Hence,...

CVE-2026-111504

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-113894

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-111504

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-111504

Dell OpenManage Enterprise versions prior to 4.8.0 are vulnerable to an Improper Neutralization of Argument Delimiters in a Command (Argument Injection) vulnerability (CWE-88). A high privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . Remediation i...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

RansomLook

RansomLook RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Features Based on ransomwatch https://github.com/joshhighet/ransomwatch, Important changes have been done: All data are stored into Valkey Scraping is multithreaded Scraping is done with Playwright...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

cve-2017-12629

README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...

CVE-2024-46986

CVE-2024-46986 Camaleon CMS Exploit - Arbitrary File Upload This repository contains a Python script that automates the exploitation of a file upload vulnerability in Camaleon CMS. The vulnerability allows an attacker to upload arbitrary files such as Ruby scripts to the server, potentially leadi...

CVE-2022-36532

Proof of Concept for CVE-2022-36532 A vulnerability in Bolt CMS version 5.1.12 and below allows an authenticated user with the EDITORROLE to achieve remote code execution. This vulnerability can be detected using this script, for details on the vulnerability see...

gha-lab-ee08e207a8

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features It implements the SSH Agent Protocol as a Unix domain socket server, acting as a secure bridge between your SSH clients and...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...