CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

🛡️ CVE-2026-57588 - Nessus SQL Injection Exploitation Framework 📋 Table of Contents Overview Vulnerability Details Features Installation Quick Start Usage Examples Payload Types Advanced Scenarios Reporting Troubleshooting Security Considerations License 🔍 Overview CVE-2026-57588 is a critical SQL...

database-sentinel

🛡️ Database Sentinel Security audits for your database backend. Ask "audit my database" and get a scored report with exact fix code. Works as a Claude Skill Supabase, MongoDB, a read-only MCP server for any AI client, or a CLI agent that uses your own model both Supabase. →MCP server setup and...

CVE-2024-56278

CVE-2024-56278 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WP Ultimate Exporter Vulnerable version ⚠️ Since the 'WP Ultimate Exporter' plugin is an addon for the 'WP Ultimate CSV Importer' plugin, both plugins need to be installed. 1. Create a new post using the code...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

CVE-2025-22828

CVE-2025-22828 📜 Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...

Arkari

Arkari Just ARKARI | ---|--- Yet another LLVM-based obfuscator derived from Goron Introduction Supported features: Inter-procedural obfuscation Indirect jumps with...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

CVE-2024-10924

POC for CVE-2024-10924 An error handling flaw in the REST API of the Really Simple Plugins WordPress plugin versions between 9.0.0 and 9.1.1.1 included allows an attacker, when Two-Factor Authentication is enabled, to bypass authentication and take control of an existing user or administrator...

cve-2019-2215-markw

Bad Binder for markw !CAUTION Everything you do is at your own risk. I am not responsible for your broken device. Adapted with Deepseek V4 Flash Made for the latest Global MIUI 10. Overview Main goal: Get temp root on latest official miui Root can be used for flashing custom abootwhich is what I...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

stegseek

⚡ Stegseek Stegseek is a lightning fast steghide cracker that can be used to extract hidden data from files. It is built as a fork of the original steghide project and, as a result, it is thousands of times faster than other crackers and can run through the entirety of rockyou.txt in under 2...

HashCheck

PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...

CVE-2026-34486

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...

DumpTheGit

DumpTheGit DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories. The tool will flag the matches for potentially sensitive files like credentials, secret keys, tokens etc which have been accidentally uploaded by the developers. DumpTheGi...

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash CVE-2023-46818 Authenticated PHP Code Injection in ISPConfig for more details: advisory CVE-2023-46818 PoC Introduction ISPConfig versions Note: This exploit requires valid ISPConfig admin credentials and will deploy a command web she...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Remote Code Execution Access to the "Software Package Updates" module is required to trigger the vulnerability. Users with access to this module can run commands with root privileges on the system by performing OS Command Injection during a new package...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

IMDShift

IMDShift AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...