301458 matches found
Drupalgeddon2-CVE-2018-7600
π₯ Drupalgeddon 2 Exploit β bixi.py π Description bixi.py is an exploit for the CVEβ2018β7600 Drupalgeddon 2 vulnerability affecting Drupal 7. It allows remote command execution RCE on vulnerable Drupal servers through an intuitive interface and predefined commands. β οΈ DISCLAIMER / LEGAL NOTICE THI...
SNet
SNet ζ₯ζ¬θͺηγ―γγ‘γ / Japanese version A CTF where you use AI to capture the flag. No pentesting experience? No problem. Claude Code acts as your personal trainer β it sets up the environment, teaches you the tools, and guides you through real attack techniques step by step. You type every command...
CVE-2025-5548
π‘οΈ CVE-2025-5548 β FreeFloat FTP Server Buffer Overflow Exploit π Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...
CVE-2026-18718 β Updated!
Advisory: GHSA-pcfh-853f-q3gh Β· Severity: High CVSS 7.5 Β· Affected: Ghidra β€ 12.1.2 Β· Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...
EUVD-2026-58544
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods...
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...
GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...
EUVD-2026-58507
OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints...
OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints
Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...
GHSA-52GF-6RPQ-FGMX OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints
Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...
EUVD-2026-63663
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection...
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection
Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...
GHSA-W878-PJ84-3J5V Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection
Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...
GHSA-9468-V6MJ-FPPW Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends
Vulnerability Details File: internal/client/handler.go OnClientConnecting, internal/proxy/http.go requestHeaders, internal/proxy/grpc.go requestMetadata, internal/unigrpc/grpc.go Consume Line: handler.go:389,548-552 e.Headers - SetEmulatedHeadersToContext, http.go:131-165 requestHeaders,...
CVE-2025-69600
CVE-2025-69600 author: Rafael JosΓ© NΓΊΓ±ez GulΓas company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...
fracture
Fracture FragAttacks WiFi Penetration Framework CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automates three novel attack chains via 802.11 frame injection. It exploits the A-MSDU aggregation vulnerability in WPA2/WPA3 to inject arbitrary plaintext frames into encrypted networks β...
Exploit for Eval Injection in Langflow
Description Usage python3 poc.py -u -c Without...
CVE-2024-3094
Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...
CVE-2025-29927-Proof-of-Concept
Walkthrough Step 1 5 min Hint Which network services are exposed by the target? β β β Solution root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Step 2 5 min Hint 1 The landing page only reveals a login page, but web servers often expose additional paths. Hint 2 Try using a directory...
cdt-vulnsamba-deploy
CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...