292900 matches found
Exploit for Integer Overflow or Wraparound in Gitlab
CVE-2026-97229: GitLab CI/CD 정규식 컴파일러 정수 오버플로로 인한 미인증 원격 코드 실행...
Exploit for Unchecked Return Value in Google Brotli
node2shell-check A read-only, zero-dependency POSIX sh scan...
Exploit for CVE-2026-98432
CVE-2026-98432 — Linux IPv4 TCP POC A working POC, tested a...
Exploit for CVE-2026-109518
cve-2026-109518-audit !CVEhttps://img.shields.io/badge/CVE...
Rancher: Info Disclosure
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...
Better Auth (Expo plugin): Auth Bypass
@better-auth/expo before 1.7.16 allows certain account-takeover outcomes e.g., unauthenticated changes of any account's email address, because it signs a caller-supplied state value without checking whether that value had been issued by the server. NOTE: the application secret must be rotated aft...
SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks...
reverse-skill
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持...
open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base...
exploitdb-crawler
ExploitDB Crawler Full run guide: RUN.md Adoni...
Exploit for Special Element Injection in Rocket.Chat
python3 expoit.py -t 'http://...
log-sentinel
LogSentinel A lightweight SIEM / intrusion detection tool i...
Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware
Hikvision CVE-2017-7921 PoC !CVEhttps://img.shields.io/ba...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress
CVE-2026-119977 — WordPress Core Upgrade Window RCE TOCTOU Re...
Exploit for CVE-2026-86583
This exploit works only when you have subscriber user credential...
Synology DSM - synoplugind RCE Exposure (CVE-2024-10441)
Identifies Synology DSM/BeeStation systems whose firmware is below SA-24:20 fixes for CVE-2024-10441 pre-auth synoplugind / SYNO.API.Auth plugin env injection. Uses SYNO.Core.System firmware when available. !/usr/bin/env python3 -- coding: utf-8 -- """Synology synoplugind pre-auth RCE exposure...
Fortinet FortiWeb Admin Account Creation (CVE-2025-64446)
CVE-2025-64446 path traversal to cgi-bin/fwbcgi allows unauthenticated creation of a local FortiWeb administrator account no shell session — chain to exploits/linux/http/fortinetfortiwebrce for RCE. !/usr/bin/env python3 -- coding: utf-8 -- """FortiWeb auth bypass — create local admin account...
Gladinet CentreStack/Triofox - LFI Detection (CVE-2025-11371)
Detects CVE-2025-11371 unauthenticated file read on /storage/t.dn via the s= parameter Gladinet UploadDownloadProxy TempDownload handler. !/usr/bin/env python3 -- coding: utf-8 -- """Gladinet CentreStack/Triofox temp download LFI CVE-2025-11371.""" import re import urllib.parse from kittysploit...
Synology Replication Service - Exposure Detection (CVE-2024-10442)
Detects Internet-exposed Synology Replication Service synobtrfsreplicad on TCP/5566. CVE-2024-10442 is a pre-auth memory corruption in libsynobtrfsreplicacore Pwn2Own Ireland 2024 / SA-24:22. !/usr/bin/env python3 -- coding: utf-8 -- """Synology Replication Service synobtrfsreplicad exposure...
Check Point Quantum Gateway File Read (CVE-2024-24919)
CVE-2024-24919 path traversal on POST /clients/MyCRL allows unauthenticated read of local files e.g. /etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Quantum Gateway arbitrary file read CVE-2024-24919.""" from future import annotations import re from kittysploit import from...