auto-cve-2022-44268.sh

auto-cve-2022-44268 Automating exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Description ImageMagick will interpret the...

EDRs

EDRs This repo contains information about EDRs that can be useful during red team exercise. patchsyscalldynamically64.c This proof-of-concept is resolving the syscall ID dynamically no need to check the version running on the remote host. To get the information on disk not tampered a call to...

MasterHttpRelayVPN

MasterHttpRelayVPN Youtube safe search and live streaming are now Bypassed & Working by default. so you don't need youtubeviarelay or Cloudflare / VPS exitnode for it. Language: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفاده کنید. Telegram Channel 📣:...

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

CVE-2023-38831 Reverse Shell Demonstration This repository contains a PDF summary and screenshots of a lab-based demonstration of CVE-2023-38831. The vulnerability allows attackers to embed and execute malicious payloads in compressed files. In this case, the payload triggers a reverse shell...

claude-code-security-audit

Claude Code Security Audit & CVE-2026-21852 Scanner A security audit and environment hardening tool for Anthropic's Claude Code agentic CLI. Scans repositories for CVE-2026-21852 pre-trust execution surfaces, hook hijacking, malicious base URL redirection, and unauthenticated token exfiltration...

CVE-2024-54374

CVE-2024-54374 Sogrid = 1.5.6 - Unauthenticated Local File Inclusion Description The Sogrid plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server...

CVE-2024-53677

CVE-2024-53677: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2024-53677 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution...

cve-2020-0796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Stored Cross-Site Scripting XSS 📋 Overview Field| Details ---|--- CVE ID| CVE-2023-37190 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel-PBX Affected Version| 4.0.0-6 Severity| Medium CVSS v3.1 Score: 5.4 Discovered By| Sahil Ojha...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT XXE Channel Adaptation Exploit Script Adapts the PHP file-read - RCE exploit script from Ambionics' official cnext-exploits to the SVG upload + XXE arbitrary file read scenario PolarisCTF 2026 "Avatar Uploader" type challenges. Prerequisites Target: Linux + glibc update...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

CVE-2023-24955-PoC

CVE-2023-24955-PoC Exploit for Microsoft SharePoint 2019 An exploit published for a vulnerability named CVE-2023-24955 .I saw the code and There was some bug in the resolveTargetInfo and getOAuthInfo . Then I fixed it and it's for u now. ❗❗❗❗❗❗ Remember that you should run it with Python2 I tried...

auto-re-agent

re-agent Autonomous reverse-engineering agent — source-aware reverser/checker loop, objective verifier, parity engine, and Ghidra backend. Overview Demo: YouTube re-agent automates a reverse-engineering workflow by combining a reverser/checker loop with Ghidra decompilation through...

spoofed

Spoof Toolkit v2.1 Professional-grade async Python network spoofing suite Interactive menu-driven UI · Full IPv4/IPv6 coverage · Responder-style poisoning Authorized security testing only — by amibhai Disclaimer: This tool is for educational purposes and authorized security auditing only. The...

EUVD-2026-110849

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117573

The hagent tool (through commit 761eec6) is vulnerable to an OS command injection vulnerability within the hagent_arduino and hagent_esp32 tools. The flaw exists because the args parameter is improperly sanitized, allowing attackers or prompt-injected agents to supply metacharacters that are inte...

EUVD-2026-110846

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $, backticks or a closing double quote in an...

CVE-2026-117568 mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $, backticks or a closing double quote in an...

CVE-2026-117568

Versions of mcp-ffmpeg prior to and including 1.0.5 are vulnerable to an OS command injection (CWE-78). The flaw exists in the resize-video , extract-audio , and get-video-info tools, where the application fails to properly sanitize videoPath or outputDir values. An attacker can provide crafted v...