ProxyListReliabilityCheck

ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...

CVE-2026-49179-Active-Directory-WriteSPNScript-Command-Injection

CVE-2026-49179: Active Directory WriteSPNScript Command Injection Summary Field| Value ---|--- CVE ID| CVE-2026-49179 CVSS| 8.8 AV:N/AC:L/PR:L/UI:N CWE| CWE-77 Command Injection Affected Component| ntdsai.dll — WriteSPNScript function Affected Systems| Windows Server 2016, 2019, 2022, 2025...

rickmote

rickmote The Rickmote Controller: Hijack TVs using Google Chromecast The Rickmote is a Python program for Hijacking Chromecasts and playing arbitrary video to their connected TVs. Full details on how the hack works were provided at the talk "Rickrolling your Neighbors with Google Chromecast" at...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

CVE-2026-18351

CVE-2026-18351 Mass exploit tool for CVE-2026-18351 — Unauthenticated Arbitrary File Upload → RCE in Drag and Drop File Upload for Elementor Forms credit johenlastgen | telegram @johenlastgen | channel @jlgnetworkredirect Features Passive vulnerability probe no upload Full exploit mode with shell...

sonicrack

Sonicrack Developed by Team X at Bishop Fox Description A tool to decrypt SonicOSX NSv firewall firmware version 7.1.1+. Run it against an OVA image first to extract keys, then it can also decrypt SIG images. Firmware can be obtained from SonicWall's support site with a valid license. Keys seem t...

CVE-2025-47273-PoC

CVE-2025-47273: setuptools version 78.1.0 - Path Traversal in setuptools.packageindex Disclaimer This Proof of Concept PoC is intended for educational purposes and authorized security auditing only. The author assumes no responsibility for misuse of this information. Unauthorized access to comput...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup root@kitploit: cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit...

CVE-2026-86861

A flaw was found in pgAdmin 4. The File Manager's savefile endpoint, used for saving files from the Query Tool and ERD, did not properly handle symbolic links. An authenticated user with existing filesystem access to the pgAdmin host or a shared storage backend could exploit a timing window to...

readstat:fuzz_format_sas7bdat: Heap-buffer-overflow in sas7bdat_parse_all_pages_pass2

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=6263848727019520 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsas7bdat Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

CVE-2026-54752 NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-54752

NetBox Device Type Library is a community-sourced collection of device type definitions for import into NetBox. The vulnerability resides in the read_pickle_data function within tests/pickle_operations.py, which uses pickle.load to deserialize pull-request-controlled tracked pickle cache files. A...

EUVD-2026-82413

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-54752 NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

CVE-2026-54692

SAIL is a cross-platform image library that, prior to 1.0.0 , contains a heap out-of-bounds write in the XBM X10 decoder (sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c). When ceil(width/8) produces an odd row stride, the decoder writes two file-controlled bytes per literal into a bu...

EUVD-2026-82409

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...