CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...

CVE-2025-55891

CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...

CVE-2025-29927

CVE-2025-29927 — Next.js middleware authorization bypass Summary: vulnerability in Next.js middleware allowing authorization bypass by spoofing the x-middleware-subrequest header. Table of Contents CVE-2025-29927 — Next.js middleware authorization bypass Table of Contents Gathering vulnerable hos...

CVE-2018-1049-POC

This Python script is a custom reimplementation of the Metasploit module exploit for CVE-2018-1049, which targets VyOS Vyatta via a privilege escalation vulnerability in a Perl script misused through sudo. You need valid SSH credentials. You gain root via command injection in a sudo-permitted...

FreeMOCA

FreeMOCA: Memory-Free Continual Learning for Malicious Code Analysis ArXiv Paper Link Zahra Asadi, Haeseung Jeon, Sohyun Han, Md Mahmuduzzaman Kamol, Se Eun Oh, Mohammad Saidur Rahman† Equally credited authors. †Corresponding author. !NOTE This is official implementation of the paper FreeMOCA:...

CVE-2025-55182-scanner

RSC Surface & Crash Detector This tool is a non-intrusive security detection script designed to identify exposed React Server Components RSC surfaces and verify crash-based vulnerability behavior related to: CVE-2025-55182 CVE-2025-66478 It is intended for defensive security testing, WAF...

CVE-2025-64155-hunter

CVE-2025-64155 Scanner A Python scanner for detecting the command injection vulnerability CVE-2025-64155 in Phoenix Monitor service. Description CVE-2025-64155 is a command injection vulnerability in Phoenix Monitor service that allows remote code execution through the clusterurl parameter in the...

wappalyzergo v0.2.96

Wappalyzergo A high performance port of the Wappalyzer Technology Detection Library to Go. Inspired by Webanalyze. Uses data from https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer Features Very simple and easy to use, with clean codebase. Normalized regexes +...

CVE-2025-57392

CVE-2025-57392 🔒 Security Vulnerability Report Product: BenimPOS Desktop V3.0 Vulnerability Type: Insecure File Permissions Affected Components: BenimPOS.exe, unins000.exe, System.Data.SQLite.dll Vulnerability Class: CWE-276: Incorrect Default Permissions Proof of Concept by: Fatih Bülbül Test...

CVE-2026-42392

A flaw was found in Dovecot. An attacker with valid credentials can send an invalid IMAP URLFETCH command, leading to the inclusion of uninitialized memory in the error response. This can disclose process memory contents to the client, potentially revealing sensitive data. Mitigation To mitigate...

CVE-2026-40017

A flaw was found in Dovecot. A remote attacker who can send mail to a user can craft a message header designed to cause collisions in an internal hash table. This manipulation forces the IMAP THREAD command to consume excessive CPU resources, leading to degradation or a complete denial of service...

Security update for libapr-util1

This update for libapr-util1 fixes the following issues: CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via aprdbdoracle bsc1274850. CVE-2026-34502: heap buffer overflow in APR memcache...

CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

pathFinder

🧭 Pathfinder // CTF & Penetration Testing Playbook A mode...

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n महत्वपूर्ण RCE शोषण अवलोकन यह रिपॉजिटरी CVE-2025-68613 CVSS 9.9 के हाथों-हाथ शोषण का दस्तावेज़ीकरण करती है, जो n8n वर्कफ़्लो ऑटोमेशन प्लेटफ़ॉर्म संस्करण 0.211.0 से 1.120.3 को प्रभावित करने वाली एक महत्वपूर्ण रिमोट कोड निष्पादन भेद्यता है। यह शोषण नैतिक रूप से एक नियंत्रित...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host root@kitploit: python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command root@kitploit: python CVE20221388.py -a true -u targeturl -c command Attack list of hosts root@kitploit:...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale प्रमाणीकरण बाईपास और RCE CVE-2024-3408 के लिए पुनरुत्पादित प्रयोगशाला वातावरण, जो D-Tale में प्रमाणीकरण बाईपास और रिमोट कोड निष्पादन कमजोरी है। कमजोरी D-Tale संस्करण 3.15.1 तक निम्नलिखित कारणों से कमजोर हैं: 1. हार्डकोडेड SECRETKEY "Dtale" Flask सत्र हस्ताक्षर के लिए - सत्र...

libfido2

== libfido2 image:https://github.com/yubico/libfido2/workflows/linux/badge.svg"Linux Build Status github actions", link="https://github.com/Yubico/libfido2/actions" image:https://github.com/yubico/libfido2/workflows/macos/badge.svg"macOS Build Status github actions",...

Exploit for Code Injection in Langflow

CVE-2026-0768 Donate Help maintain this pr...

CVE-2023-27372

Research Project: CVE-2023-27372 — SPIP RCE, Lab Environment + Safe PoC 1 Description This repository contains: stand/ — a lab environment vulnerable setup on Docker: SPIP + MariaDB. poc/ — a Python verification tool scanner implementing safe confirmation of the vulnerability Safe PoC without...