674990 matches found
openhaystack
OpenHaystack OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects keyrings, backpacks, ... or integrate it into other Bluetooth-capable devices such as notebooks...
openclaw
OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an AI assistant that runs on your devices and meets you in the channels you already use. It connects models, tools, messaging channels, and optional companion apps through one Gateway, for a single operator or for a team whos...
Hacking-Tools
Hacking Tools A curated list of penetration testing and ethical hacking tools, organized by category. This collection includes Kali Linux tools and other notable utilities. Supporters .png?raw=true Table of Contents 🔍 Information Gathering 🔎 Vulnerability Analysis 💥 Exploitation Tools 📡 Wireless...
CVE-2025-55182_PoC
CVE-2025-55182 - React Server Components 远程代码执行 PoC 作者： rl0x01 描述 CVE-2025-55182 是一个通过 Flight 协议影响 React Server Components 的严重（CVSS 10.0）远程代码执行（RCE）漏洞。 受影响版本 Next.js| React ---|--- 14.3.0-canary.77 至 15.0.4| 19.0.0 15.1.1-canary.0 至 15.1.8| 19.1.0 15.2.0-canary.0 至 15.2.5| 19.1.1 15.3.0-canary.0 ...
CVE-2024-3400-Canary
CVE-2024-3400 Código PoC ¿No hemos aprendido de HoneyPoC? Uso Apunte el script al host: python3 Poc.py...
MemProcFS-Analyzer
MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...
JQueryingU
JQueryingU NOTES: Base client side detection code created by Christian Ludwig https://jsfiddle.net/ChristianL/AVyND/, and used by APT 29 in 2016. APT 29 modified the popup to be a POST request and used it during a conference shadowing campaign to profile user systems and who clicked before sendin...
React2Shell-CVE-2025-55182-Testing-Environment
Entorno de Pruebas React2Shell CVE-2025-55182 Un entorno de pruebas contenerizado para CVE-2025-55182, una vulnerabilidad crítica 10.0 CVSS de Ejecución Remota de Código en React Server Components. ⚠️ ADVERTENCIA Este entorno es intencionalmente vulnerable y solo debe usarse para: Investigación y...
CVE-2025-9074-PoC-Bash
CVE-2025-9074-PoC-Bash El PoC original es: https://github.com/j3r1ch0123/CVE-2025-9074. Este es un nuevo PoC en bash, ya que no todos los contenedores Docker tienen python instalado, y principalmente debe ejecutarse desde dentro de un contenedor. Pasos Desde dentro del contenedor, use lo siguient...
ShadowNet v11.1.0
Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Download Whonix here: https://www.whonix.org/ Please use a secure VM...
cve-2026-23550-poc
CVE-2026-23550 PoC Un pequeño probador en Bash para CVE-2026-23550. Solicita el endpoint de inicio de sesión del conector modular de WordPress afectado, verifica si se emite una cookie wordpressloggedin e intenta confirmar el acceso al panel de administración. Advertencia: Utilice esta herramient...
CVE-2026-54761-poc
CVE-2026-54761: Bypass de crossProviderNamespaces en Traefik Kubernetes Gateway PoC Versión en inglés Resumen Este repositorio es una prueba de concepto PoC para reproducir localmente la vulnerabilidad de alta gravedad CVE-2026-54761 presente en el proveedor Kubernetes Gateway de Traefik. Esta...
CVE-2024-47875-PhpSpreadsheet-XSS-PoC
CVE-2025-22131 • PhpSpreadsheet HTML 写入器 XSS PoC 概述 这是针对 CVE-2025-22131 的 PoC，该漏洞是 PhpSpreadsheet 2.2.2、2.1.2 和 1.29.4 之前版本中的一个跨站脚本 XSS 漏洞。漏洞存在于 generateNavigation 函数中，该函数在 XLSX 到 HTML 转换过程中未能对工作表名称进行清理，从而允许注入恶意 JavaScript。 CVE ID: CVE-2024-47875 GitHub Advisory: GHSA-79xx-vf93-p7cx Affected...
CVE-2025-7955
CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Falta de verificación del lado del servidor para la omisión de autenticación mediante la función ringcentraladminlogin2faverify 🚨 CVE-2025-7955 | RingCentral Communications Exploit de WordPress 📝 Resumen de la vulnerabilidad CVE: CVE-2025-795...
security-report-for-ruoyi-dictionary-preview-stored-xss
RuoYi 4.8.3 Dictionary Preview Stored XSS English security ad...
H2-database-CVE-2022-23221
H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to compile and execute Java code directly within the SQL engine. The H2 driver parses JDBC URLs to...
apache_audit_cve-2026-23918
cve-2026-23918 针对 CVE-2026-23918 （Apache HTTPD HTTP/2 双重释放 RCE）以及 2026 年 5 月 4 日 Apache 软件基金会安全公告中披露的其他四个相关 CVE 的防御性审计工具。 CVE| 严重性| 组件| 影响| 受影响版本 ---|---|---|---|--- CVE-2026-23918| 高危（CVSS 8.8）| HTTP/2| 双重释放 / RCE| 仅 2.4.66 CVE-2026-24072| 中危| modrewrite（apexpr）| 权限提升| ≤ 2.4.66 CVE-2026-28780| 低...
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...
CVE-2026-30691
CVE-2026-30691 - Aviso de Vulnerabilidad Detalles oficiales del registro de vulnerabilidades de MITRE y documentación técnica para CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description La vulnerabilidad de Cross-Site Scripting XSS en...