CVE-2025-1974

🚨 Log Injection Test via Ingress-NGINX Admission Controller 🧠 Overview This script tests for annotation injection vulnerabilities in Kubernetes clusters using the NGINX Ingress Controller. It is meant for detection purposes only in relation to CVE-2025-1974, which allows malicious annotations to...

CVE-2026-54121-Certighost

🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con estructuras netlogon añadidas. Tenga en cuenta que, por defecto, esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto le permite realizar DCSync, pero también interrumpe la comunicación con otros...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: filebrowser, juicefs, grafana-alloy, prometheus-adapter, cert-manager, flux-source-controller, loki, chartmuseum, ingress-nginx-controller, gitness, step, falco-no-driver, cert-manager-webhook-pdns, zarf, continuity, kyverno-policy-reporter, external-dns, gitlab-page...

CVE-2026-97031 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: filebrowser, juicefs, grafana-alloy, prometheus-adapter, cert-manager, flux-source-controller, loki, chartmuseum, ingress-nginx-controller, gitness, step, falco-no-driver, cert-manager-webhook-pdns, zarf, continuity, kyverno-policy-reporter, external-dns, gitlab-page...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

CVE-2026-94440 vulnerabilities

Vulnerabilities for packages: rqlite, whereabouts, skopeo, custom-pod-autoscaler-operator, nri-elasticsearch, trivy-operator, kuberlr, cluster-api, rekor, flux-source-controller, cloud-provider-aws, kube-state-metrics, secrets-store-csi-driver-provider-aws, grafana-rollout-operator,...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explanation and demonstration of the ZeroLogon CVE-2020-1472 vulnerability The purpose of this lab is strictly educational. Its execution is not recommended in production environments or those that do not belong to you. About the Vulnerability Context of the vulnerability...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646-v6ed3b5b01ff1

Pipeline: Groovy Plugin Introduction A key component of the Pipeline plugin suite, this provides the standard execution engine for Pipeline steps, based on a custom Groovy interpreter that runs inside the Jenkins controller process. In principle other execution engines could be supported, with...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Official security verification module for the AI Security Tool Ecosystem 🌐 Demo • 📚 Project Website • 💬 Community Chat Site Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview I am publishing a detailed...

CVE-2025-10230

CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...

zerologon

Zerologon Set of scripts, to test and exploit the zerologon vulnerability CVE-2020-1472 What is it? ZeroLogon is a vulnerability that allows us to exploit a cryptography flaw in Microsoft's Active Directory Netlogon Remote Protocol MS-NRPC, which allows users to log in to servers using NTLM...

POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Toolkit Overview CertiGhost is a critical vulnerability CVSS 8.8 in Active Directory Certificate Services AD CS that allows a low-privileged domain user to impersonate a Domain Controller and achieve full domain compromise. CVE:...