CVE-2025-3248-POC

Langflow RCE Exploit - CVE-2025-3248 ⚠️ Disclaimer This code is strictly intended for educational and research purposes only. Unauthorized use on systems without explicit permission may constitute a violation of the law. The author is not responsible for any misuse or malicious activity involving...

CVE-2024-36401_Geoserver_RCE_POC

Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link Router OS Command Injection For more Information see https://vulners.com/cve/CVE-2026-3227 A persistent, authenticated OS Command Injection vulnerability in TP-Link router firmware leading to device bricking or potential LAN takeover. Disclaimer : This repository contains...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

CVE-2026-38526

CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Legal disclaimer : this code is provided for educational purposes and for authorized testing only CTF, bug bounty, private lab. The author is not responsible for any illegal use. Description Krayin CRM Webkul ≤ 2.2.x exposes the...

CVE-2026-67401

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 Test Environment Introduction When this vulnerability first emerged, in order to verify its impact, we searched the internet for many examples compiled by others, but found none that could successfully validate it. So we created one ourselves and put it here for your...

super-trouper

Super Trouper An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load,...

CVE-2026-6307

CVE-2026-6307: V8 JS-to-Wasm type confusion → RCE on Chrome 146 Local reproduction and weaponization of the V8 JS-to-Wasm deoptimization type confusion described by Nebula, taken to a xcalc popped from the renderer of Chrome for Testing 146.0.7680.165 the bug is fixed in 147.0.7727.101. All...

CVE-2025-15545

CVE-2025-15545 Information Vendor: TP-Link Vendor's website: TP-Link Model: Archer RE605X Hardware version: RE605X v3.0 Firmware version: RE605XEUV31.1.5 Build 20240905 Firmware download address: TP-Link A chain of vulnerabilities — including the use of hardcoded cryptographic keys and a command...

faraday_agent_dispatcher

Faraday Agents Dispatcher helps user develop integrations with Faraday written in any language. Installation Just run pip3 install faradayagentdispatcher and you should see the faraday-dispatcher command in your system. To setup a development environment this is, to change code of the dispatcher...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Sudo Buffer Overflow Linux Baron Samedit Privilege Escalation Exploit 📌 Overview This project demonstrates the exploitation of CVE-2021-3156 Baron Samedit , a critical heap-based buffer overflow vulnerability in the Linux sudo utility. The vulnerability allows a low-privileged use...

Wireshark

Wireshark Malware Analysis Description This lab I analyzed a known malicious packet capture on the exploit Log4J. I begun my investigation with the same playbook I use for packet capture analysis, which is to examine the statistics and see how many and how much endpoints are communicating. Notici...

pfsense-uploadconfig

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-uploadconfig pfsense-uploadconfig Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org uploadconfig.php POST config= calls configinstall then systemreboot. IDENT has no...

pwnflow

Pwnflow 🎯 Visualize Your Security Testing & Analysis Journey Pwnflow is a mind-mapping platform designed specifically for cybersecurity professionals. it helps you visualize, track, and share your security testing methodologies while maintaining complete control over your sensitive data. 🚀 Key...

IonStack-S22U

CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | While this repository originated as a device-specific port for the Galaxy S22 Ultra, the project has since shifted and expanded to support all Samsung...

sn1per-mcp

Sn1per MCP Server Drive your self-hosted Sn1per from your AI assistant: scoped, audited, for authorized testing. For authorized security testing only. Use the Sn1per MCP Server only against systems you own or are explicitly permitted, in writing, to test, and within the scope of that permission...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

MicroTrick

MikroTrick PoC — CVE-2026-86060 RouterOS unauthenticated full takeover pocmikrotrick.py is a self-contained exploit for the SSH attack chain that CERT Polska disclosed as "MikroTrick" on 2026-09-05, exploited in the wild since at least 2026-09-02 against internet-facing MikroTik RouterOS devices....

cleverhans

CleverHans latest release: v4.0.0 This repository contains the source code for CleverHans, a Python library to benchmark machine learning systems' vulnerability to adversarial examples. You can learn more about such vulnerabilities on the accompanying blog. The CleverHans library is under continu...