CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

LibAFL

LibAFL, the fuzzer library Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is a collection of reusable pieces of fuzzers, written in Rust, it gives you many of the benefits of an off-the-shelf fuzzer, while being completely customizable. Some...

CVE-2026-90898

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit Toolkit Exploitation tools for CraftCMS Remote Code Execution vulnerability based on SensePost research. 📁 File Description 🎯 Main Tools 1. finalpoc.py - Final optimized POC Supports information disclosure and remote code execution Automatic asset ID discovery...

CVE-2021-40865

CVE-2021-40865 CVE-2021-40865 POC/exploit-poc import org.apache.commons.io.IOUtils; import org.apache.storm.serialization.KryoValuesSerializer; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.URLDNS; import java.io.; import java.math.BigInteger; import java.net.; import...

watermarks-remover

| | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a thin client:...

MSRMapper

MSRMapper BYOVD Manual Mapper for Windows x64 · CVE-2025-8061 Overview MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD Bring Your Own Vulnerable Driver attack. The project maps a PE64 driver...

CVE-2022-46080

EN This project provides a proof-of-concept exploit for a remote code execution RCE vulnerability in Nexxt routers, specifically targeting the version 15.03.06.60. This vulnerability allows an attacker to enable the Telnet service on the router without authentication, potentially gaining...

CVE-2023-34960

CVE-2023-34960 Mass unauthenticated command injection Chamilo Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone https://github.com/Pari-Malam/CVE-2023-34960 $ cd CVE-2023-34960 $ pip/pip3 install -r requirements.txt $ python/python3 exploit.py Footprints...

pfsense-cp-filename-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-cp-filename-xss pfsense-cp-filename-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Filename interpolates into / CSS url... on default login HTML with no encode. Portal origin i...

CVE-2026-23744-RCE

MCPJam Inspector v1.4.2 - RCE Exploit Vulnerability Description MCPJam Inspector contains an unauthenticated Remote Code Execution RCE vulnerability in the /api/mcp/connect endpoint. The vulnerability allows attackers to execute arbitrary commands by sending a malicious MCP server configuration...

CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

EUVD-2026-114542

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

Exploit for OS Command Injection in Nortekcontrol Linear_Emerge_Essential_Firmware

CVE-2019-7256 — Linear eMerge E3: команда без аутентификации...

CVE-2026-63378

Prior to version 3.0.1-beta , the TAKO AI Agent for Okta is vulnerable to code injection (CWE-94). Authenticated users with a valid fctr_session cookie can submit arbitrary Python source in the script_code field of POST /api/react/execute-script without administrator privileges. The vulnerability...

CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — Code Injection Affected| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 Fixed| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

CmdLineSpoofer

Command Line Spoofer An example of using C to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process Environment Block, is logged when a new process starts, and is displayed in tools such as Process Hacker and Task Manager. Introduction This code i...