CVE-2025-26794

CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM - exploit writeup Exim report: https://www.exim.org/static/doc/security/CVE-2025-26794.txt I discovered this vulnerability through a manual code review. Vulnerability details: Issue The SQL parameters, when SQLite is used as the DBM, are...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

BSQLinjector

BSQLinjector BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: --file Mandatory - File containing valid HTTP request and SQL injection point SQLINJECT...

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.2.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

Telaen => v1.3.1 - Open Redirect

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. id: CVE-2013-2621 info: name: Telaen = v1.3.1 - Open Redirect author: ctflearner severity: medium description: | Open Redirection...

nemesis

N E M E S I S - Crafting & Injection The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts. The latest release...

laf

LoRaWAN 監査フレームワーク - アルファ版 IoTデプロイメントは成長を続けており、その大きな成長の一部は、世界中の何百もの都市（スマートシティ）や産業、家庭に展開された数百万のLPWAN（低消費電力広域ネットワーク）センサーで構成されています。最も使用されているLPWAN技術の1つがLoRaであり、LoRaWANはそのネットワーク標準（MAC層）です。LoRaWANは暗号化を組み込んだ安全なプロトコルですが、実装上の問題や脆弱性が現在のほとんどのデプロイメントのセキュリティに影響を与えています。...

CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

XOE

XOE Exploit XXE Out-Of-Band Vulnerability Easily Details This tool creates xml file which contain the ip and port you entered and listen to connection to response :D Screenshot...

pig

Pig Pig（Packet intruder generator の略）は、Linux パケットクラフティングツールです。 Pig を使用して、IDS/IPS などをテストできます。 Pig は、すぐに使用できる既知の攻撃シグネチャを多数提供しており、要件に応じてより具体的なものを追加してコレクションを拡張できます。 現時点では、TCP、UDP、ICMP に基づくトランスポート層を持つ IPv4 シグネチャを作成できます。 また、Ethernet フレームからパケットを構築するだけでなく、ARP プロトコルに基づくシグネチャも作成できます。 もし私の SPRING 2016 号の 26...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

theway

The Way The Way 是一款用于解包、重新打包和创建恶意 Cisco 自适应安全设备管理器 ASDM 包的工具。ASDM 是基于 Java 的图形化管理界面，用于管理自适应安全设备 ASA 系统（例如防火墙和 VPN）。ASDM 包托管在 ASA 上，管理员每次通过 ASDM 连接到 ASA 时，都会下载子组件。能够将恶意 ASDM 包植入 ASA 的攻击者可以在管理员系统上实现代码执行。 该漏洞是由几个问题共同导致的。最具体地说，由于 Cisco 未对包进行签名，因而可以制造恶意 ASDM 包。能够构造合法包并计算文件哈希的攻击者可以在 ASA 上加载任意包。此漏洞已被分配编...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – クエリ作成によるSQLite FTS3 Match情報漏洩 プログラムコード（Python） sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES 'admin:password123...

CVE-2024-38063-Exploit-Refactoring

CVE-2024-38063 Exploit Advanced exploitation tool with precision error handling and DO-176C compliant execution. Overview This is a specialized security assessment tool for testing Windows IPv6 vulnerability mitigation on target systems. Includes automated network interface detection, packet...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...

CVE-2026-78895

A flaw was found in Chromium. A remote attacker could exploit an information leak in the Paint component by crafting a malicious HTML page. This vulnerability allows the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive information...