flashmingo

FLASHMINGO Instalación NOTA: Las siguientes instrucciones son para Python3. Si necesitas instalar FLASHMINGO en Python2.7, puedes revisar la versión 1.0 en la pestaña releases. Los pasos de instalación son esencialmente los mismos. Instala los paquetes de Python3 listados en requirements.txt...

EUVD-2026-75775

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...

ImageMagick < 6.9.13-55 / 7.x < 7.1.2-26 Memory Leak

The remote host has a version of ImageMagick installed that is prior to 6.9.13-55, or 7.x prior to 7.1.2-26. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the...

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: Byte Reaper Telegram: @ByteReaper0 Overview This repository contains a Proof‑of‑Concept PoC in C for a suspected Path Traversal vulnerability in M‑Files version 25.6.14925.0. The PoC file exploit.c attempts to read sensitive files e.g...

CVE-2017-9798

Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage root@kitploit: python check.py --path /var/customers/webs/...

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit 基于 CVE-2026-43499 的 Mi 8e5 自动化解锁工具 项目简介 Mi 8e5 Unlock Toolkit 是一个面向 Mi 8e5 机型 的自动化解锁辅助工具。 项目基于 CVE-2026-43499 相关研究实现，集成 ADB、Fastboot、解锁组件、清理数据镜像与自动化脚本，用于在 Windows 环境下简化 8e5 设备的授权解锁测试流程。 本工具旨在减少手动操作步骤，降低流程复杂度，提高测试效率，适用于安全研究、固件验证、设备维护与开发调试等场景。 核心特性 一键化流程 自动执行关键步骤，减少重复手动操作。...

CVE-2026-81540 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...

Baskerville

Baskerville Reads from files or interface and writes to files in specified directory with filename based on unixtime of first packet in each file. Certain protocols can be suppressed, in which case only the first N packets are recorded to disk. This reduces disk usage saving data which is of litt...

EUVD-2026-75752

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2026-18994

CVE-2026-18994 is a potential improper authorization vulnerability in the Lenovo File Manager Android Application , which is distributed exclusively in the Chinese market. A local authenticated user could read or modify protected files within the application. Lenovo rates this HIGH severity with ...

astrolock

Astrolock A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files...

MS15-011-Files

MS15-011-Files Repo that the MS15-011 exploit clones to get required files. Avoids having to download all files from exploitdev...

c2finder

c2finder Mandatory disclaimer: I am not a master coder by any means, so this is a very simple script. Do not rely on this to be perfect. I am open to feedback or ideas for improvements, though : Description This script downloads the master C&C list from Bambanek Consulting...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

CVE-2026-84828

A local privilege escalation and information disclosure flaw in PCS (Pacemaker Configuration System) allows a user with membership in the haclient group to read arbitrary files on the filesystem via the pcs host auth --token command. The pcsd daemon reads file contents with root privileges , and ...

CVE-2025-63307

CVE-2025-63307 – Authenticated Stored Cross-site Scripting XSS in laravel-file-manager v3.3.1 🧭 Overview An authenticated Stored Cross-site Scripting XSS vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitra...

CVE-2026-13745

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

CVE-2026-78675

A flaw was found in GitPython that could allow for local file content disclosure. This vulnerability occurs because GitPython does not properly disable mergeincludes when processing .gitmodules files. An attacker could exploit this by creating a specially crafted .gitmodules file with include...