Exploit for CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar...

awesome-bugbounty-tools

Outils de Bug Bounty Géniaux Une liste organisée de divers outils de bug bounty Contenu Recon Subdomain Enumeration Port Scanning Screenshots Technologies Content Discovery Content Filtering Links Parameters Fuzzing Monitoring Waf Evasion Exploitation Command Injection CORS Misconfiguration CRLF...

Exploit for CVE-2026-78070

SQL Injection via ORDER BY Shortcode in plgcontentdpcalendar...

WhisperPair

WhisperPair: Google Fast Pair 用テストハーネス -green Google Fast Pair デバイスが、ペアリング、アカウントバインド、およびプロトコルレベルの攻撃に対して脆弱かどうかをテストするための実用的なツールです。 このリポジトリは、Google Fast Pair デバイスのセキュリティを評価するためのツールである WhisperPair テストハーネスを提供します。研究者と実務者の両方が、私たちの調査結果を再現し、自身のデバイスをテストできるように設計されています。...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

CVE-2024-8190

CVE-2024-8190: Ivanti Cloud Service Appliance - Аутентифицированная инъекция команд Доказательство концепции для эксплуатации CVE-2024-8190 на уязвимых устройствах. Сообщение в блоге Коренная причина и индикаторы компрометации здесь:...

CVE-2024-38063

CVE-2024-38063 - Исследование уязвимости удаленного выполнения кода в стеке TCP/IP Windows Комплексное исследование, чтобы сэкономить ваше время, энергию, нервы и дать понимание. Я хочу начать с того, что этот конкретный CVE, как и многие другие, из-за своей высокой оценки серьезности привлек...

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

EUVD-2026-70370

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85100

A resource consumption vulnerability in 2FastLabs agent-squad (versions up to 1.1.4 ) affects the function AgentSquad.routeRequest within the Streaming Agent Response Workflow component (file agent-squad/typescript/src/orchestrator.ts). The flaw allows a remote attacker with low privileges to tri...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

recipe-blog-encoding

recipe-blog-encoding !WARNING Этот проект полностью создан с помощью vibe-coding вероятно, частично плагиачен из этого репозитория, и автор — дурачок , которому просто показалась забавной эта идея Используйте SEO-игривые преамбулы рецептов как средство для кодирования секретных сообщений хотя...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs는 GitHub의 개인 버전과 유사한 경량의 자체 호스팅 Git 서비스로, 저사양 서버에서도 쉽게 실행되도록 설계되었습니다. CVE-2025-8110 취약점은 공격자가 심볼릭 링크를 사용하여 경로 제한을 우회할 수 있게 하는 심각한 보안 결함입니다. .api/config를 가리키는 악의적인 링크를 업로드하면 공격자는 gogs API를 사용하여 sshCommand 매개변수가 포함된 악성 구성 파일을 삽입하고 호스트 서버에서 RCE를 달성할 수 있습니다. 사용법 1. 이 저장소를 로...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install jwt-hack From source root@kitploit:...

text4shellburpscanner

text4shellburpscanner Этот проект является модификацией log4j2burpscanner, из которой удалена функция активного сканирования; при необходимости она будет добавлена позже. CVE2022-42889 Ссылка на лабораторию: https://github.com/karthikuj/cve-2022-42889-text4shell-docker.git Также можно подписаться...

ctftool

CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...

pinecone

Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. This tool is designed for...