388887 matches found
CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-
CVE-2026-23007 β Serverless Cold Start Memory Remanence Data Leakage Program Code Python Lambda sim lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global SECRET SECRET = secrets.tokenhex16 return...
psa-2026-00043-recovery
psa-2026-00043-recovery Recovering from a wiper that presented as ransomware, after an attack against internet-exposed Proxmox infrastructure PSA-2026-00043-1 / CVE-2023-54391. The attacker wiped guests and left the filesystems damaged. Two recovery tracks depending on what the guest was: databas...
Computer-Security-Equifax-2017
Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies sanitization, monitoring, crypto best practices. Red team vs blue team demo of OS security flaws: exploit, persistence backdoor, and...
kalici-dosya-silme-araci
Permanent File Deletion Tool & KalΔ±cΔ± Dosya Silme AracΔ± This project is a simple tool that allows users to permanently delete specified files. The program overwrites the specified file with random data, changes the content of the file, and then deletes it, effectively removing any traces of the...
Spring-Data-Mongodb-Demo
Spring-Data-Mongodb-Demo CVE-2022-22980 Environment...
maldrolyzer
maldrolyzer Simple framework to extract "actionable" data from Android malware C&Cs, phone numbers etc. Installation You have to install the following packets before you start using this project: Androguard git clone https://github.com/androguard/androguard; cd androguard; sudo python setup.py...
CVE-2020-0014-Toast
CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...
Torward
Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...
CVE-2024-24919
EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...
CVE-2023-22515
CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization β allows an attacker to remotely create an admi...
CVE-2026-42945
CVE-2026-42945 PoC Go δΈζ | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...
CVE-2022-45354
Download Monitor = 4.7.60 - Sensitive Information Exposure via REST API CVE-2022-45354:version found on http://wordpress.lan Details : CVE-2022-45354:version matched at http://wordpress.lan Protocol : HTTP Full URL : http://wordpress.lan/wp-content/plugins/download-monitor/readme.txt Timestamp :...
CVE-2026-25049
π¨ CVE-2026-25049 β n8n Unauthenticated Settings Disclosure π Overview CVE ID: CVE-2026-25049 Affected Software: n8n Severity: Critical Category: Improper Access Control / Information Disclosure This vulnerability allows unauthenticated access to internal configuration data via a REST API endpoint...
GEVAUDAN
GEVAUDAN Gluster Environment Vulnerable AUthentication Data Access & Nuke. Getting Started Gevaudan is a Red Hat GlusterFS exploit for CVEs 2018-1088 & 2018-1112. Available in both standalone and metasploit module formats. Presentations | Date| Conference| Link to Video| Link to Slides...
Blackash-CVE-2025-58360
π π°οΈ 'CVE-2025-58360' GeoServer WMS Endpoint Vulnerable to XXE Attack π π·οΈ Basic Information CVE ID : CVE-2025-58360 Published : π November 25, 2025 Last Modified : π November 25, 2025 still fresh as of Nov 26 Vulnerability Type : XML External Entity XXE β CWE-611 Affected Software : GeoServer...
SharpChromium
SharpChromium Introduction SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract: Cookies in JSON format History with associated cookies for each history item Saved Logins Note: All cookies returned are in...
tinfoleak
tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...
VUL4J-59
jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...
CVE-2022-26134
CVE-2022-26134 PoC !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. The developer of this tool assum...
EphemeralNet
EphemeralNet A secure P2P network with custom Relay for hostile NATs, built in C++20. Programmable forgetting for high-assurance peer-to-peer storage. Why EphemeralNet? Shardian designs infrastructure for teams that take deletion guarantees as seriously as confidentiality. EphemeralNet is our C++...