CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

sitedorks

Want to get the latest updates? Be sure to ⭐ this repo! ⭐ Now also available, Sitedorks Web ⭐ About SiteDorks Search Google, Bing, Brave, Ecosia, Yahoo or Yandex for a search term with several websites. A default list is already provided, which contains Moltbook, Grok, Github, Gitlab, Surveymonke...

CVE-2026-34212

CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I identified, responsibly disclosed, and reproduced a High-severity stored XSS issue in Docmost , the...

WiFiBroot

A Wireless Pentest/Cracking Tool for 4-way Handshake & PMKID DESCRIPTION WiFiBroot is built to provide clients all-in-one facility for cracking WiFi WPA/WPA2 networks. It heavily depends on scapy , a well-featured packet manipulation library in Python. Almost every process within is dependent...

machinae

Machinae Colector de Inteligencia de Seguridad Machinae es una herramienta para recolectar inteligencia de sitios/feeds públicos sobre varios tipos de datos relacionados con la seguridad: direcciones IP, nombres de dominio, URLs, direcciones de correo electrónico, hashes de archivos y huellas...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

cook

COOK An overpowered wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustration killer! & Customizable! Index Installation Configuration Basic Ranges Param Approach COOK's Ingredients...

smbghost

SMBGhost Scanner CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation packet and checking the response. Usage root@kitploit: Single host python3 scanner.py -H 10.0.0.5 Host list python3 scanner.py -l targets.txt Network...

CVE-2025-68613-POC

🚨 CVE-2025-68613: Critical RCE Vulnerability in n8n Table of Contents 1. Overview 2. What is n8n? 3. Vulnerability Basics 4. Technical Details 5. Affected Versions 6. Exploitation Mechanics 7. Real-World Impact 8. Detection Methods 9. Remediation & Mitigation 10. Resources & References Overview...

passivedns

| | @ | \ | \ | || | TM | |.------. .-----. .-----. -. .-.------. | |\ || | || | | | | || --'| --'| |\ Y /| --| | |/ || || | | || || ||||||| / | /|/ | |||| A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring NSM and general digital forensics. PassiveDNS...

rspamd

Introduction Rspamd is an advanced spam filtering system and email processing framework that allows evaluation of messages by a number of rules including regular expressions, statistical analysis and custom services such as URL black lists. Each message is analysed by Rspamd and given a verdict...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand what "file extension " means before watching the following tutorial. If you don't understand, first search "how to change a file extension" If it still shows as MP4 after changing the extension, that means file...

ntlm_theft

ntlmtheft A tool for generating multiple types of NTLMv2 hash theft files. ntlmtheft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already insi...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Writeup || Tryhackme 📖 Introduction What is OverlayFS.? OverlayFS is a Linux kernel module that allows the system to combine several mount points into one, so that you can access all the files from each within one directory structure. It’s often used by live USBs, or...

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

EUVD-2026-72261

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...

CVE-2026-86276 SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...

CVE-2026-86276

SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 contains hard-coded credentials in the file db.php , allowing a remote attacker with no privileges to gain unauthorized access. The exact processing affected is described as "unknown" in the advisory. A proof-of-concept ...