Exploit for CVE-2026-98260

CVE-2026-98260 · Android 17 / pudding Local Privilege Escalati...

Vulners Software Audit

Query the Vulners Software Audit API for known vulnerabilities matching one or more software products/versions CPE string or vendor:product:version. Bring-your-own-key BYOK: set apikey, plugin config, or VULNERSAPIKEY. Prefer plugin run vulners … as the hub; this scanner is a thin wrapper...

Exploit for CVE-2026-111497

node2shell-detector Host-side detections for Node2Shell CV...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — WordPress Pre-Auth RCE CVE-2026-109618 / CVE-2026...

Exploit for Path Traversal in Oracle Glassfish_Server

Work 1 — Secure REST API Development with CI/CD and Real CVE V...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

Exploit for CVE-2026-111497

AGPL-3.0 / commercial Brotli decoder exposure, with evidence...

Web-App-Attack-Detection-OWASP-Top-10-SQLi-XSS-vs-DVWA

Web-App-Attack-Detection-OWASP-Top-10-SQLi-XSS-vs-DVWA WAZUH...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux Bluetooth Buffer Overflow DoS

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Malicious code in @walknpm/todo-cli (npm)

@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...

Malicious code in dsh-plugin-blender-3d (npm)

[email protected] is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell behind nginx Measurements, a lab, and an app-level...

django-defender

django-defender This project is retired and is no longer maintained. Existing releases and documentation remain available. See the retirement issue for the remaining PyPI archival work. .. image:: https://jazzband.co/static/img/badge.svg :target: https://jazzband.co/ :alt: Jazzband .. image::...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

LadonGo

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html Introduction LadonGo is an open source intranet penetration scanner framework, which can be used to easily detect segment C, B, A live hosts, fingerprint identification, port scanning, password explosion, remote execution, high-ri...

Fastir_Collector

FastIR Collector We changed our approach to live forensics acquisition, which means FastIR Collector is no longer maintained. We recommend using our newFastIR Artifacts collector instead Concepts This tool collects different artefacts on live Windows and records the results in csv or json files...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...