CVE-2019-1653

CVE-2019-1653 A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. Script python sederhana ini merupakan automation exploit pada CVE-2019-1653...

CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE For educational and authorized security research purposes only. Description Sandbox bypass vulnerability in the Jenkins Templating Engine JTE plugin = 2.5.3 that allows a low-privileged user to execute arbitrary code on the Jenkins server. The flaw...

Tivoli-Madness

Tivoli-Madness Advisory for: CVE-2020-28054: An Authorization Bypass vulnerability affecting JamoDat – TSMManager Collector v. = 6.5.0.21 A Stack Based Buffer Overflow affecting IBM Tivoli Storage Manager Command Line Administrative Interface Version 5, Release 2, Level 0.1. Unfortunately, after ...

megplus

meg+ Deprecated Automated reconnaissance wrapper — TomNomNom's meg on steroids. Built by TomNomNom and EdOverflow. About This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a...

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 Vulnerability Lab Educational lab demonstrating exploitation of CVE-2018-7600 Drupalgeddon2 using a vulnerable Drupal 7.56 environment deployed with Docker. This project simulates a real-world vulnerability assessment workflow, including: Vulnerable environment setup...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0',...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cve-2023-38831

Project Introduction This is a tool written in Go for generating POC for the CVE-2023-38831 vulnerability Affected version: WinRAR 6.23 How to use? Compile go build cve-2023-38831.go Usage cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Here, 1234.jpg can be the result of any file modification. I...

CVE-2026-7394-SQLI

SQL Injection in Pizzafy Ecommerce System — admin/vieworder.php Details Field| Value ---|--- Vendor| SourceCodester Product| Pizzafy Ecommerce System using PHP and MySQL Version| 1.0 Vulnerability| SQL Injection CWE| CWE-89 CVSSv3 Score| 7.2 High Attack Vector| Network Auth Required| Yes...

Juniper-Bug-Automation-CVE-2023-36845

Automation for Juniper CVE:2023-36845 Overview This is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run i...

CVE-2024-27348-Apache-HugeGraph-RCE

Remote Code Execution vulnerability in Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 is a critical Remote Command Execution RCE vulnerability in Apache HugeGraph Server, a popular graph database system. The flaw resides in the Gremlin traversal language interface, which allows users to...

CVE-2022-2185

CVE-2022-2185 wo ee cve-2022-2185 gitlab authenticated rce read: https://starlabs.sg/blog/2022/07-gitlab-project-import-rce-analysis-cve-2022-2185/ how to use First spawn a gitlab instance. Log in, create a group and project with a unique name. Create an access token. Edit these lines in main.go...

LAB1-metasploitable

LAB1-metasploitable Exploitation des vulnérabilités sur la version vsftpd 2.3.4 du service ftp CVE-2011-2523 Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html...

sentinel-mcp

SentinelMCP — AI-Powered Cyber Defense System Google Cloud Hackathon submission — Autonomous threat detection and remediation orchestrated by Google Cloud Agent Builder Vertex AI Agent , powered by Gemini 2.0 Flash, Model Context Protocol MCP, and Dynatrace observability. The Problem Security tea...

CVE-2024-2997

CVE-2024-2997 Scanner Overview CVE-2024-2997 Scanner is an advanced vulnerability scanner designed to detect the command injection vulnerability in web applications. This tool helps security professionals identify potential security risks in their applications. Disclaimer This tool is for...

imR0T

imR0T cryp·tog·ra·phy imR0T: Send a quick message with simple text encryption to your whatsapp contact and , basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution Donate If this project is very helpful to your penetration testing and u want to support me ,...

CVE-2025-5961

CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

CVE-2022-36267-PoC

CVE-2022-36267 - Airspan AirSpot 5410 Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36267, a critical vulnerability in Airspan AirSpot 5410 devices. The script is a practical demonstration,...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Arbitrary Local File Read https://www.metabaseq.com/imagemagick-zero-days/ Based on the PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, I created a vulnerability testing environment by using docker. Usage get image docker pull y1nglamore/cve202244268:latest you...

CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...