EUVD-2026-64964

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64965

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71905 DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

CVE-2026-71906

DrayTek VigorAP multiple models are affected by an OS command injection in the setLan function, caused by insufficient validation of the lanIp and lanNetmask fields before they are passed to a command execution context. A remote attacker with valid administrative credentials on the device's web m...

EUVD-2026-64963

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...

CVE-2019-16759

vBulletin RCE 5.x E-Mail + SMTP abrufen CVE-2019-16759 Dieses Tool extrahiert und exportiert E-Mail + SMTP aus dem Datenbankserver. VERWENDUNG root@kitploit: $ git clone https://github.com/mas1337/CVE-2019-16759.git && cd CVE-2019-16759 $ ./vb-email-smtp.sh list.txt Haftungsausschluss Der gesamte...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds Tentativa de roubar credenciais do kernel a partir do launchd + ponteiro taskt Baseado em: CVE-2017-7047 Sobre o Triple Fetch por Ian Beer do Google Project Zero Triple Fetch é um exploit para dispositivos iOS anteriores ao iOS 10.3.3 Ele explora um erro lógico no libxpc...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...

CVE-2026-78386 Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associated with ransomware groups and markets were returned largely verbatim to unauthenticated callers whenever the location itself was not marked as private. These...

Hawk

Hawk रीयल-टाइम में SSH और SU क्रेडेंशियल्स को चुपचाप इंटरसेप्ट करें Hawk sshd और su प्रोसेस की निगरानी करता है, टारगेट प्रोसेस को संशोधित किए बिना ptrace के माध्यम से मेमोरी से पासवर्ड निकालता है। ज़ीरो राइट्स। पूर्णतः रीड-ओनली क्रेडेंशियल हार्वेस्टिंग। डेमो यह कैसे काम करता है Hawk SSH और SU...

cve-2026-59891-control-lab

CVE-2026-59891 Regression & Control Lab An isolated hands-on lab and read-only audit project that compares the actual vulnerable and fixed versions of @sigstore/oci with the same input and checks environment-specific exposure conditions. The CVE Reporter for this project is gyubin02...

Tenda-F3-V4

Exploit do Roteador Tenda F3 e Downloader de Arquivos Este projeto é uma ferramenta para baixar vários arquivos do roteador Tenda F3 v3/v4 através de uma vulnerabilidade não autenticada CVE-2020-35391. Permite obter o arquivo de configuração, o log do sistema e o dump da memória flash de um...

IoT-Vulnerability-Research-Public

हार्डवेयर सुरक्षा और भेद्यता अनुसंधान यह रिपॉजिटरी मेरे स्वतंत्र भेद्यता अनुसंधान, हार्डवेयर ऑडिट और समन्वित भेद्यता प्रकटीकरण CVD के लिए एक केंद्रीकृत सार्वजनिक संग्रह के रूप में कार्य करती है। सभी प्रूफ-ऑफ-कॉन्सेप्ट स्क्रिप्ट, फर्मवेयर निष्कर्षण और हार्डवेयर टियरडाउन यहाँ केवल शैक्षिक उद्देश्यो...

open-sammy

SAMMY ओपन सोर्स v2 यह रिपॉज़िटरी SAMMY - OWASP SAMM टूल के ओपन सोर्स संस्करण को होस्ट करता है। https://owasp.org/www-project-open-sammy/ लाइसेंस यह प्रोजेक्ट Creative Commons Attribution-ShareAlike 4.0 International License के अंतर्गत लाइसेंस प्राप्त है। विवरण के लिए LICENSE फ़ाइल देखें। SAMMY v2...

BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...