CVE-2026-59341

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

CVE-2026-62280

Open Access Management OpenAM is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived values through ConsentRequiredResource and wap/authorize.ftl without HTML escaping. An attacker can induce a user with an...

btrpa-scan

btrpa-scan 一款蓝牙低功耗（BLE）扫描器，具有高级可解析私有地址（RPA）解析功能。发现附近的 BLE 设备，通过 MAC 地址跟踪特定设备，或使用身份解析密钥（IRK）解析隐私随机化地址。 作者： David Kennedy @HackingDave 公司： TrustedSec 功能 发现所有设备 - 扫描范围内所有广播的 BLE 设备，包含信号强度、估计距离、制造商数据和服务 UUID 定向搜索 - 通过 MAC 地址搜索特定设备并监控每次检测 IRK 解析 - 使用一个或多个身份解析密钥解析可解析私有地址，以识别使用随机地址保护隐私的设备 多 IRK -...

CVE-2026-46619

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN value into an LDAP search filter without escaping, while the default empty trusted-gateway list allows all traffic. In a...

CVE-2026-44793

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode user-supplied parameters rendered into HTML in the SAML2 cluster cookie-hash redirect path. An unauthenticated attacker can...

CVE-2026-44203

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel Root SQL 执行工具包 ⚠️ 仅限道德用途 – 授权安全测试 本仓库仅为授权安全专业人员、蓝队和渗透测试人员 提供工具。 未经授权访问计算机系统在 CFAA（美国）、Computer Misuse Act（英国）、TCK 243/244（土耳其）以及全球类似法律 下均属违法行为。 📖 漏洞概述 CVE‑2026‑58048 是 cPanel & WHM 11.x 版本中的一个严重 SQL 注入漏洞，允许已认证的 cPanel 用户通过数据库重命名功能以 MySQL root 权限 执行任意 SQL 命令。 工作原理 1...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

reverie

reverie Herramientas de Pentest Automatizadas Diseñadas para Parrot Linux esta herramienta hará tus tareas básicas de pentesting como Recolección de Información, Auditoría de Seguridad y Generación de Informes, de modo que esta herramienta realizará cada tarea de forma totalmente automática. Guía...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. INSTALL git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USAGE Scan a single...

EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

EvilWinRM-NG

EvilWinRM-NG Comenzando Para facilitarle el inicio con GitLab, aquí tiene una lista de pasos recomendados. ¿Ya eres un profesional? Simplemente edita este README.md y hazlo tuyo. ¿Quieres hacerlo fácil? Usa la plantilla al final. Añade tus archivos Crear o subir archivos Añadir archivos usando la...

CVE-2025-29927-POC

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

Spray

Spray Una herramienta de Password Spraying para credenciales de Active Directory por Jacob Wilkin Greenwolf Primeros pasos Estas instrucciones te mostrarán los requisitos y cómo usar Spray. Requisitos previos Todos los requisitos vienen preinstalados en Kali Linux, para ejecutar en otras...

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...

SecAssignment

CVE-2020-7246 qdPM 9.1 For educational purposes only. See Reference for the details. Run root@kitploit: $ git clone https://github.com/arafatansari/SecAssignment.git $ cd SecAssignment $ docker build -t cve-assignment:ine . $ docker run -it -p 80:80 cve-assignment:ine $ service apache2 start |...

Android-vulnerability-exploitation

Android-vulnerability-exploitation Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same thing And then Having learned of this, ...

PowerShell-Red-Team

PowerShell-Red-Team-Enum Colección de funciones de PowerShell que un Red Teamer puede usar para recolectar datos de una máquina u obtener acceso a un objetivo. Agregué archivos ps1 para los comandos incluidos en el módulo RedTeamEnum. Esto te permitirá encontrar y usar fácilmente un solo comando ...

CVE-2026-37149

CVE-2026-37149 SQL Injection in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Overview CVE ID: CVE-2026-37149 Vulnerability Type: SQL Injection CWE-89 Severity: High Discoverer: Dhyey Patel Description GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...