xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...

Privilege escalation vulnerability exists in the internal Command-Line Interface of Fabric OS (CVE-2026-94577)

: A privilege escalation vulnerability exists in the internal Command-Line Interface CLI authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the process execution environment can bypas...

PwnedCheck

PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...

CVE-2025-55182-advanced-scanner-

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh Usage Scan with default command id ./scanner.sh -d example.com Execute custom command ./scanner.sh -d example.com -c...

CVE-2025-9491_POC

CVE-2025-9491 PoC de Ofuscación LNK Una herramienta de prueba de concepto para demostrar la vulnerabilidad de los archivos de acceso directo LNK de Windows ZDI-CAN-25373/CVE-2025-9491. Esta herramienta muestra cómo se pueden ocultar argumentos de línea de comandos maliciosos dentro de archivos .l...

CVE-2002-0740

CVE-2002-0740 SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability Packetstorm publication at https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Securiteam publication at http://www.securiteam.com/unixfocus/5FP0R0K6UC.html Securityfocus publication at...

CVE-2000-0114

CVE-2000-0114 This a CVE I found it in VDP at hackerone Platform Steps to POC :- 1 - install " pip install CVE-2000-0114 " 2 - run " CVE-2000-0114 -u https://example.com " 3 - or you can run script...

clif

clif clif es un fuzzer de aplicaciones de interfaz de línea de comandos CLI, muy parecido a lo que wfuzz o ffuf son para la web. Fue inspirado por la vulnerabilidad CVE-2021-3156 de sudo y el hecho de que, por algunas razones, afl-fuzz de Google no permite la especificación ilimitada de argumento...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jboss...

Astra Linux – Vulnerability in exim4

A use-after-free exists in Exim 4.96 through 4.98.1, which could allow users with command-line access to escalate their privileges...

CVE-2024-1112

CVE-2024-1112 This is a PoC, I wrote for "ResHacker.exe" Heap overflow vulnerability. Usage Execute CVE-2024-1112.py, copy all string at created payload.txt then use it to as parameter to open ResHacker.exe ResHacker.exe $string NOTE: Don't forget the find correct address - You can find full...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

AgentCyTE

CORE TopoGen Generate reproducible CORE network topologies from scenario XML files using a rich Web GUI or a command-line interface. Table of contents Highlights Screenshots Quick start Prerequisites Install dependencies Launch the Web UI Run the CLI Full Preview workflow Feature deep dive Planni...

CVE-2024-28085

Wall-Escape CVE-2024-28085 The util-linux wall command does not filter escape sequences from command line arguments. The vulnerable code was introduced in commit cdd3cc7fa4 2013. Every version since has been vulnerable. A full report can be found here. I have nicknamed this bug "WallEscape". This...

CVE-2024-23897

Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...

CVE-2018-1000802-PoC

Python CVE-2018-1000802 Proof-of-Concept This is a PoC for the vulnerability in makearchive function exported by shutil builtin module. Vulnerability is present in CPython Python 2.7 prior to commit add531a1e55b0a739b0f42582f1c9747e5649ace. For the vulnerability to be exploitable in the wild ther...

CVE-2025-50361

Desbordamiento de Búfer Global en SmallBASIC SmallBASIC es un intérprete del lenguaje BASIC rápido y fácil de aprender, ideal para cálculos cotidianos, scripts y prototipos. SmallBASIC incluye funciones trigonométricas, matriciales y de álgebra, un IDE integrado, una potente biblioteca de cadenas...

mwcfg

Extractor de Configuración de Malware Una herramienta de extracción de configuración de malware y módulos para MalDuck Este proyecto es GRATIS, como en GRATIS 🍺, úsalo comercialmente, de forma privada o como mejor te parezca. La forma más sencilla de usar este proyecto es visitar mwcfg.info, ¡y...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...