ggshield

ggshield: protect your code with GitGuardian !IMPORTANT macOS: upgrading to 1.54.0 triggers a Keychain prompt forggshield-py, a second binary that now reads your saved token as part of our performance improvements. Click Always Allow ; it won't ask again. ggshield is a CLI application that runs i...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="submit" value="...

drupalgeddon2-cli

drupalgeddon2-cli A command-line rewrite of the Drupalgeddon2 CVE-2018-7600 proof-of-concept, built as a study exercise while working through the Hack The Box Academy Attacking Common Applications module. !WARNING For authorised security testing and education only. Running this against systems yo...

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC English | 한국어 This repository contains a Proof of Concept PoC for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It consists of a vulnerable Next.js application and a Python exploit script to test the vulnerability. What is CVE-2025-66478? This is...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior. CVE| Component| Severity| Technique| Verification model ---|---|---|---|-...

tracehound

Deterministic runtime security buffer for high-velocity APIs External systems signal threats. Tracehound preserves evidence. Website · Documentation Index · API Reference · Configuration · RFCs · Security · Changelog Tracehound is a decision-free forensic runtime that sits between upstream...

shellshocker-pocs

Shellshocker - Repository of "Shellshock" Proof of Concept Code Collection of Proof of Concepts and Potential Targets for ShellShocker Wikipedia Link: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Please submit a pull request if you have more links ...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes is a information gathering tool OSINT. The main purpose is to gain information about domains,username and phone numbers with the help of public source avaiable on the internet also it use the google dorks attack for specific researchers. It also use proxies for make your...

Raccine

Raccine A Simple Ransomware Protection Why We see ransomware delete all shadow copies using vssadmin pretty often. What if we could just intercept that request and kill the invoking process? Let's try to create a simple vaccine. How it works We register a debugger for vssadmin.exe and wmic.exe,...

org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve()

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation error triggers an infinite loop within the method resolutio...

CVE-2026-15315

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

BDFProxy

New version of BDFProxy is out! Only to sponsors! Get access here: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 For security professionals and researchers only...

Potato

Potato Privilege Escalation on Windows 7,8,10, Server 2008, Server 2012 How it works Potato takes advantage of known issues in Windows to gain local privilege escalation, namely NTLM relay specifically HTTP-SMB relay and NBNS spoofing. Using the techniques outlined below, it is possible for an...

ls-poc

CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...

gitea-artifact-v4-readall

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-artifact-v4-readall gitea-artifact-v4-readall Gitea 1.27.3 - Gitea jobsummary.go already caps at MaxJobSummarySize 1 MiB with io.LimitReader. parseProtobufBody in artifact v4 does io.ReadAllctx.Req.Body with no...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Vendor advisory: Sharp Product Security Advisory 2026-004 published July 31, 2026 Summary Sharp MX/BP series multifunction printers expose the address book through the device web interface without...

heartbleed-masstest

This tool allows you to scan multiple hosts for Heartbleed, in an efficient multi-threaded manner. This tests for OpenSSL versions vulnerable to Heartbleed without exploiting the server, so the heartbeat request does not cause the server to leak any data from memory or expose any data in an...

CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...

CVE-2026-113720

The virtualenv tool (prior to version 21.14.9 ) contains a vulnerability where the app-data copy seeder uses shutil.copy() to move cached package files into new environments. This causes files to retain source modes from a previous cache, potentially overriding the current run's umask . If the ca...