CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Complete Guide ⚠️ Just for Learning, Not Hacking ; ⚠️ Hey! This is a simple tool I made to help people check if their Redis servers are vulnerable to the bug. It's not meant for actual attacks - just for learning and protecting your own stuff. What's This All About?...

CVE-2023-2825-Gitlab

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...

cov-int

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

libunwind_CVE-2015-3239_AfterPatch

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

Exploit for CVE-2026-98260

Analysis of CVE-2026-98260 This vulnerability in the Linux ke...

FakeDellOM

FakeDellOM A fake host that can be "managed" by Dell OMSA, getting you past the login screen, and possibly serving as a starting point for fuzzing or other testing. Backstory While researching potential vulnerabilities¹ in Dell's OpenManage Server Administrator, I was interested both in: 1. not...

CVE-2018-25031

Swagger UI Cross-Site Scripting POC: CVE-2018-25031 using Selenium in Python This repository contains a Python script that demonstrates a proof of concept POC of a Cross-Site Scripting XSS vulnerability in Swagger UI, using the Selenium library. The goal of this POC is to identify websites that a...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

CVE-2026-116372

MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...

CVE-2025-49132

CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation pip install -r requirements-standalone.txt Manual installation: pip...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence Remote Code Execution Overview CVE-2023-22527 is a critical remote code execution vulnerability in Atlassian Confluence Data Center and Server. This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable Confluence instances...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

CVE-2010-4669

rauok This tool exploits CVE-2010-4669 https://vulners.com/cve/CVE-2010-4669 Be careful when testing, especially on older networks. Usage usage: ./main.py interface thread-count packet-count Dependancies -python2 -scapy -root...

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...

spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-gateway/tree/master.svg?style=svg"CircleCI",...

EUVD-2026-109666

MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...

CVE-2026-116372 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules

MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...

CVE-2026-116372 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules

MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...