CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentraladminlogin2faverify Function 🚨 CVE-2025-7955 | RingCentral Communications WordPress Exploit 📝 Vulnerability Overview CVE: CVE-2025-7955 Affected Plugin: RingCentral...

terminal-bench-2

Terminal-Bench 2.0 | | | | || || | |/ \ '| ' | | ' \ / | | || || | | / | | | | | | | | | | | | | | || || |||| || || |||| ||,|| |||| || | | | | \ / \ \\ | \ / \ ' \ / | ' \ || | | | \\ | | | / | | | | | | | / / | || | \ \ |/ || |||| || |/ \\ Terminal-Bench is a popular benchmark for...

qyvora-toha3ee

toha3ee A local & network security assessment framework written in Go. It is a research and authorised-penetration-testing tool that covers the network assessment pipeline — host and service discovery, enumeration, credential auditing, vulnerability identification and authorised exploitation. Its...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

CVE-2023-27350-CVE-2023-27351

CVE-2023-27350, CVE-2023-27351 CVE-2023-27350, CVE-2023-27351, CVE-2026-PaperCut Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CVE-2024-36401-poc

CVE-2024-36401 — GeoServer OGC XPath Injection RCE Unauthenticated Remote Code Execution exploit for GeoServer via OGC filter valueReference parameter injection XPath/JXPath evaluation. Disclaimer: This tool is intended for authorized penetration testing and security research only. Do not use...

CVE-2026-22738-POC

CVE-2026-22738 — SpEL Injection RCE in Spring AI SimpleVectorStore Unauthenticated remote code execution via Spring Expression Language SpEL injection in SimpleVectorStore.similaritySearch. Affected Versions Artifact| Vulnerable| Fixed ---|---|--- org.springframework.ai:spring-ai-core| 1.0.0 –...

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

Exploiting-a-vulnerability-using-reverse-shell

Information Security Fundamentals — Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...

CVE-2024-3116_RCE_in_pgadmin_8.4

CVE-2024-3116RCEinpgadmin8.4 Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin 8.4 pip download .whl file 8. Install pgadmin4 : python -m pip install C:\Users\User\Downloads\pgadmin4-8.4-py3-none-any.whl Folder of installation :...

vscode-frida

Frida Workbench for VSCode Repository | Issues | Install This is a community contributed project, not affiliated with the official Frida team. It is developed and maintained by @CodeColorist as an open-source extension for Visual Studio Code to enhance the Frida scripting experience. 中文说明...

cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RCE Chain Discoverer: Searchlight Cyber via GPT-5.6 Sol Severity: Critical — CVSS 9.8 CVE-2026-63030, CVSS 9.1 CVE-2026-60137 Status: Actively exploited — added to CISA KEV Alias: "wp2shell" Overview This is an unauthenticated remote cod...

DeeCLIP

DeeCLIP: A Robust and Generalizable Transformer-Based Framework for Detecting AI-Generated Images ☀️ If you find this work useful for your research, please kindly star our repo and cite our paper! ☀️ TODO We are working hard on the following items: Release ArXiv paper Release training scripts...

CVE-2025-68493

CVE-2025-68493 CVE-2025-68493 7. References 1 Apache Struts XWork XML Vulnerability CVE-2025-68493 PoC and Script | ZONE.CI Global Network. https://zone.ci/secarticles/wx/486533.html 8. Vulnerability Verification and Exploitation To verify and exploit the CVE-2025-68493 vulnerability, you can use...

CVE-2026-24061-GUI

CVE-2026-24061 Vulnerability Detection and Exploitation Tool Thank you🙏 for your Star support; Thank you🙏 for your usage and recognition; Program Overview This is a GUI tool for detecting and exploiting the CVE-2026-24061 vulnerability. This vulnerability is a GNU Inetutils telnetd authentication...

CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

CVE-2026-21627 Unauthenticated Arbitrary File Inclusion in Joomla's Novarain Framework nrframework Overview A critical vulnerability in the Tassos/Novarain Framework plgsystemnrframework Joomla plugin allows unauthenticated attackers to include arbitrary PHP files on the server, instantiate...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...