TS_LLMLib

tsllmlib - TrustedSec LLM Library TrustedSec LLM Library es una biblioteca de Python para interactuar con LLM locales que admiten el uso de herramientas. Permite ejecutar grandes flujos de trabajo tradicionalmente solo posibles con modelos de frontera, aprovechando los endpoints de LLM locales y ...

CVE-2026-5173

🦊 CVE-2026-5173: PoC de Ejecución No Autorizada de Métodos en GitLab WebSocket 🛠️ Resumen CVE-2026-5173 permite a un atacante autenticado con bajos privilegios invocar métodos backend restringidos a través del endpoint WebSocket /-/cable de GitLab, específicamente mediante GraphqlChannel. Esto...

CVE-2025-10294

漏洞利用：通过空的 ownidsharedsecret 绕过认证（JWT伪造） 1 使用空HMAC密钥伪造有效的JWT SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header = b64ujson.dumps"typ":"JWT","alg":"HS256", separators=",",":".encode payload =...

CVE-2025-52204

CVE-2025-52204 – Znuny customer.pl 端点中的反射型XSS/HTML注入 摘要 Znuny 存在反射型跨站脚本（XSS）和 HTML 注入漏洞，攻击者可通过系统配置 CustomerPanelSessionName 定义的参数在 customer.pl 端点注入任意 JavaScript 或 HTML。 分类 CVE: CVE-2025-52204 CWE: CWE-79 – 网页生成过程中输入的不当中和（'跨站脚本'） CVSS v3.1（研究人员评估）： 6.1 中等 CVSS Vector:...

CVE-2026-39987

CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: /terminal/ws The endpoint failed to...

CVE-2026-97368

A weakness exists in chillzhuang SpringBlade versions up to 5.0.2 , specifically within the UserServiceImpl.userInfo function located in the blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java file of the user-auth-info Endpoint . An attacker can remo...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise Password Reset Account Takeover ATO For research and testing purposes only! I am not responsible for any damages to live infrastructure if this tool is not used as intended. Only use on systems you own or have permission to be testing! Usage usage: CVE-2025-58434-PasswordResetNew.py -h -u...

CVE-2024-57610

Lack of Rate Limiting in Sylius v2.0.2 Vendor Homepage: https://sylius.com/ Steps to Reproduce 1.Navigate to https://store.sylius.com/login 2.Attempt multiple login requests using automated tools or scripts e.g., Burp Suite, cURL. 3.Observe that no rate limiting is applied, and requests are...

CVE-2025-25296

CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...

routers-exploit

Repo OpenSource con PoCs y vulnerabilidades encontradas en routers TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS CVE-2020-9374 - TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS Payload: "$ls" TP LINK TL-WR849N - Bypass de autenticación: actualización de firmware y configuracione...

Apache-Solr-Arbitrary-File-Read

Apache Solr Lectura Arbitraria de Archivos Hit Counter Apache Solr por sus siglas en inglés de Searching On Lucene with Replication es un motor de búsqueda gratuito y de código abierto basado en la librería Apache Lucene. Está escrito en Java. Apache Solr dispone de APIs RESTful XML/HTTP y JSON y...

CVE-2023-20198-Exploit

Bypass de Autenticación en Cisco IOS XE CVE-2023-20198 Este repositorio contiene un exploit de prueba de concepto para CVE-2023-20198 , una vulnerabilidad de bypass de autenticación que afecta a la interfaz web de Cisco IOS XE. La vulnerabilidad permite a atacantes no autenticados ejecutar comand...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Scripts en Python para la explotación de CVE-2024-51482 SQLi en ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descripción Este script automatiza la extracción de bases de datos, tablas, columnas y credenciales aprovechando CVE-2024-51482, una vulnerabilidad de...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

CVE-2025-70849-Podinfo

CVE-2025-70849: XSS Almacenado en Podinfo Resumen Se identificó una vulnerabilidad de seguridad CWE-79 en Podinfo , una aplicación web para demostrar microservicios en Kubernetes. La funcionalidad /store permite a usuarios no autenticados cargar contenido arbitrario en HTML/JS, lo que provoca XSS...

home_SOC_suite

Home SOC Suite — Night's Watch A personal Security Operations Center SOC built from scratch during an Anwendungsentwicklung retraining program. This suite monitors a Windows endpoint for network anomalies, resource spikes, process execution, registry changes, Security Event Log activity, schedule...

cups-script-final-project

What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...

EUVD-2026-42475

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard /browser endpoint...

CVE-2026-97321

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...