scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

CVE-2026-35585-poc

CVE-2026-35585: إثبات المفهوم لحقن أوامر نظام التشغيل في File Browser النسخة الإنجليزية ملخص هذا المستودع هو إثبات المفهوم PoC للثغرة الأمنية الخطيرة CVE-2026-35585 لحقن أوامر نظام التشغيل المكتشفة في File Browser من الإصدار 2.0.0 إلى 2.33.1. توجد هذه الثغرة في ميزة 'Custom Command Hooks'. نظرًا...

CVE-2022-30190-NSIS

MSDT Patcher, alias CVE-2022-30190-NSIS Ceci est un script NSIS qui aide à déployer et à annuler le correctif de registre d'atténuation pour CVE-2022-30190, comme recommandé par Microsoft. Télécharger l'exécutable ici. Comment cela fonctionne-t-il ? Lorsqu'il est exécuté, il vérifie la présence d...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - تنفيذ الأوامر عن بُعد في Commvault Command Center أداة استغلال بلغة Python لثغرة CVE-2025-34028، وهي ثغرة تنفيذ أوامر عن بُعد في Commvault Command Center. تتيح هذه الأداة اختبار أهداف فردية أو مسح مضيفين متعددين دفعة واحدة. الميزات إمكانية استهداف مفرد أو مسح جماعي التحقق التلقائ...

cve-2023-30253

CVE-2023-30253 Description Dolibarr avant 17.0.1 permet l'exécution de code à distance par un utilisateur authentifié via une manipulation de la casse : ?PHP au lieu de ?php dans les données injectées. Documentation CVE-2023-30253 Avis GitHub : GHSA-9wqr-5jp4-mjmh Configuration root@kitploit: git...

CVE-2023-27350

CVE-2023-27350 POC لـ CVE-2023-27350 الذي يؤثر على PaperCut MF/NG الإصدارات المتأثرة 'PaperCut MF أو NG الإصدار 8.0 أو أحدث باستثناء الإصدارات المصلحة على جميع أنظمة التشغيل.' الملخص يستخدم هذا POC ثغرة تجاوز المصادقة مقترنة بإساءة استخدام وظيفة البرمجة النصية المدمجة لتنفيذ الأوامر. الاستخدام...

GHSA-XM98-3VCF-FPH7 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

PanOsExploitMultitool

PanOsExploitMultitool Outil multitâche d'exploitation et de post-exploitation pour les systèmes Palo Alto PAN-OS affectés par les vulnérabilités CVE-2024-0012 et CVE-2024-9474 Lors de l'exploitation précoce des vulnérabilités d'exécution de code à distance CVE-2024-0012 et CVE-2024-9474, j'ai...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

CVE-2024-7854

CVE-2024-7854 Woo Inquiry = 0.1 - Injection SQL non authentifiée Description : Le plugin Woo Inquiry pour WordPress est vulnérable à l'injection SQL dans toutes les versions jusqu'à la 0.1 incluse, en raison d'un échappement insuffisant sur le paramètre fourni par l'utilisateur 'dbid' et d'un...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Popcorn-TJNULL-OSCP-

هاك ذا بوكس: شرح Popcorn التاريخ: 05 يونيو 2026 الصعوبة: سهلة المنصة: HackTheBox التقنيات الرئيسية: تعداد المنافذ والخدمات، اختبار الدلائل Gobuster، تجاوز رفع الملفات، التلاعب بطلبات HTTP Burp Suite، تنفيذ الأكواد عن بُعد RCE، تثبيت شل TTY متقدم Python، استغلال Kernel/PAM المحلي التلاعب بملف MOTD...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...