CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - reflected Cross-Site Scripting XSS Description: A reflected XSS vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code Steps to exploit: 1- Login to the CMS and Navigate to the delete...

xss_vulnerability_challenges

XSS 취약점 시나리오 도전 과제 이 저장소는 몇 가지 XSS 취약점 도전 과제를 포함한 Docker 기반 PHP 애플리케이션입니다. 도전 과제의 아이디어는 다음과 같습니다: JavaScript 유효성 검사 우회 html 엔티티 우회 WAF 우회 블랙리스트 검증 우회 기본 XSS 검증 우회 XSS 공격을 위한 WAF 더블 인코딩 우회 이스케이프 문자 우회를 통한 XSS 공격 Docker를 사용한 빠른 시작 Docker Hub 사용 가장 빠름: 1. 도전 과제에 접근하려면 docker가 설치되어 있어야 합니다. 2. 다음 명령어...

tscopy

TScopy Updated 2022-03-31 Introducing TScopy It is a requirement during an Incident Response IR engagement to have the ability to analyze files on the filesystem. Sometimes these files are locked by the operating system OS because they are in use, which is particularly frustrating with event logs...

CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

CVE-2024-1086-checker

CVE-2024-1086-checker This is a simple checker script to detect the kernel configuration which is vulnerable to exploitation. A result of "kernel config not vulnerable" from this script only means that the vulnerability is not exploitable with currently known paths. How to Use curl -s...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Description The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the...

Steghide-Brute-Force-Tool

Steghide Brute Force Tool Execute a brute force attack with Steghide to file with hide information and password established. How it work Cloning this repo to your computer and typing in your terminal: git clone https://github.com/Va5c0/Steghide-Brute-Force-Tool.git To launch the script by typing:...

arp-scan

arp-scan 概要 arp-scan は、ARPプロトコルを使用してローカルネットワーク上のIPv4ホストを発見して識別するネットワークスキャンツールです。Linux、BSD、macOS、Solarisで利用可能で、GPLv3ライセンスの下で提供されています。 これは、 arp-scan バージョン 1.10.1-git の README.md です。 インストール ソースからのビルドとインストール arp-scan はGNU automake および autoconf ツールを使用します。最新の github ソースからのインストール手順は次のとおりです：...

arp-scan

arp-scan About arp-scan is a network scanning tool that uses the ARP protocol to discover and fingerprint IPv4 hosts on the local network. It is available for Linux, BSD, macOS and Solaris under the GPLv3 licence. This is README.md for arp-scan version 1.10.1-git. Installation Building and...

CVE-2026-5430

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-5430 CVE-2026-5430 WSO2 API Manager 4.5.0 — WSO2 The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported...

Exploit for CVE-2026-103355

CVE-2026-103355 - Unlimited Elements For Elementor Blind SQL I...

CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

regreSSHion-checker

regreSSHion-checker 📜 Description regreSSHion-checker is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This tool facilitates rapid scanning of multiple IP...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

CVE-2024-4358

Telerik Report Server 認証バイパス - CVE-2024-4358 概要 Progress Telerik Report Server のバージョン 2024 Q1 10.0.24.305 以前を IIS 上で実行している場合、認証されていない攻撃者が認証バイパスの脆弱性を利用して Telerik Report Server の制限された機能にアクセスできる可能性があります。 詳細はこちら — CVE-2024-4358 免責事項 : この Proof of Concept POC...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

CVE-2018-9995_dvr_credentials

ツール DVR認証情報を表示 Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa エクスプロイト: $ curl "http://:/device.rsp?opt=user&cmd=list" -H...