CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL:...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-sapi-differential Differential research on CVE-2026...

D4TA-HUNTER

Video Demo: https://darkhacking.es/d4ta-hunter-framework-osint-para-kali-linux My website: https://microjoan.com My blog: https://darkhacking.es/ Buy me a coffee: https://www.buymeacoffee.com/microjoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for...

CVE-2022-26159-Ametys-Autocompletion-XML

CVE-2022-26159-Ametys-Autocompletion-XML A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file. Features Automatic detection of maximum results returned by the autocompletion plugin. Depth first search to dump all th...

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to do DNS resolutio...

EUVD-2026-97736

obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL injection batch scanning poc Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Tool Usage python3 CVE-2023-1454-scan.py -u...

CVE-2026-55889

A flaw was found in xdg-desktop-portal. The service uses a predictable pseudorandom number generator PRNG to generate authorization tokens that manage access to shared system resources. By requesting enough tokens to determine the internal state of the generator, a malicious sandboxed application...

CVE-2026-89987

A flaw was found in the Linux kernel's huge memory management. This vulnerability can lead to silent data loss for applications utilizing shared memory segments MAPSHARED tmpfs when Transparent Huge Pages THP and swap are active. The system fails to correctly mark modified memory as 'dirty,'...

cve-2017-5638

CVE-2017-5638 Demo app of, yes, that data broker's security breach. Includes exploit code. Basic usage launch mvn jetty:run Then go to http://localhost:8080/basic-struts/index.action. You should see the Welcome to Struts 2! message. Vulnerability scan mvn site Acknowledgements Exploit code adapte...

SharpDNSExfil

SharpDNSExfil SharpDNSExfil is an exfiltration tool written in C. The main objective is to exfiltrate any "on disk" files without having to worry about restricted outbound connection. Prerequisite Remote machine should be able to resolve DNS Why did I do this? I got blind RCE during my engagement...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

CVE-2026-98806

A flaw was found in the Linux kernel's octeontx2-pf network driver. When Data Center Bridging DCB is enabled, the driver assumes traffic queue mapping structures are always initialized, which is not the case for System Data Path SDP virtual functions. This issue leads to a NULL pointer dereferenc...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

Dark_Ledger

Dark Ledger This repository serves as an archive of darknet market information, including: Vendor lists Vendor PGP keys Listings and descriptions Market structure and other relevant data CDN If you're looking to download "The Darknet Market Archives" from Gwern.net but find the available options...

CVE-2021-39165

CVE-2021-39165 Python3 POC for CVE-2021-39165 in CachetHQ Usage First of all, you should install the dependencies: pip3 install -r requirements.txt If you want to check whether the victim URL is vulnerable or not, you can execute: python3 exploit.py -u -c If you want to know the output of a MySQL...

CVE-2024-4879

CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability. Overview This tool is designed for bulk scanning of the ServiceNow CVE-2024-4879 vulnerability. It is inspired by Assetnote security research, which covers the recent ServiceNow CVE-2024-4879, CVE-2024-5178, and...

exfil-scan

exfil-scan Scan LLM outputs and AI-generated content for data exfiltration signals before they reach users, logs, or downstream systems. 1 Why exfil-scan exists Modern LLM applications routinely process sensitive prompts, internal documents, API responses, and user data. That creates a new securi...

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

sift

Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...