CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

CVE-2024-50657

CVE-2024-50657:Incorrect Access Control on Owncloud apk An issue in Owncloud android apk v.4.4.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method. Vulnerability Type Incorrect Access Control Vendor of...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

CVE-2025-61505

CVE-2025-61505 – PHP Object Injection in e107 CMS 2.x Reported: September 18, 2025 CVE Assigned: October 9, 2025 Published: February 02, 2026 CVE ID: CVE-2025-61505 Discoverer: Anas Abderrahman Benbarek Summary A PHP Object Injection vulnerability CWE-502: Deserialization of Untrusted Data was...

CVE-2025-22381

CVE-2025-22381: Host Header Injection in Aggie Detailed analysis and Proof-of-Concept for CVE-2025-22381, a Host Header Injection vulnerability discovered in the Aggie Open-Source Project. Vulnerability Overview+ CVE ID: CVE-2025-22381 Published: October 2025 MITRE assignment Disclosed publicly:...

-CVE-2025-59528-PoC

CVE-2025-59528-PoC FOR EDUCATIONAL PURPOSES ONLY A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool, that is also part of an HTB seasonal challenge, on which I tested it btw. If it's not working, make sure the comman...

censys-subdomain-finder

Buscador de subdominios de Censys Nota importante : A finales de 2024, Censys ya no proporciona acceso API a cuentas gratuitas. Esta es una herramienta para enumerar subdominios utilizando los registros de transparencia de certificados almacenados en Censys Search. Debería devolver cualquier...

CVE-2025-61506

An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint. Vulnerability: Unrestricted File Upload CWE-434 CVE ID: CVE-2025-61506 DISCOVRED : 18 september ASSIGNED : 9 october Affected Component:...

CVE-2024-43998

CVE-2024-43998 Description CVE-2024-43998 : Missing Authorization vulnerability in the Blogpoet theme allows access to functionality not properly constrained by ACLs. This issue affects Blogpoet versions from n/a through 1.0.3. Usage usage: CVE-2024-43998.py -h -u URL -p PLUGIN CVE-2024-43998...

CVE-2025-50422

Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...

c2s

C2S Command and Control server on Slack What is C2S? C2S allows you to build a simple Command and Control server using only and only Slack without any extra server or anything. Installation pip3 install requests The rest of installation focus config on Slack workspace settings so please follow th...

gitbleed_tools

GitBleed Tools - para extraer datos de repositorios git reflejados Acerca de Este repositorio contiene scripts de shell que se pueden usar para descargar y analizar diferencias entre repositorios Git clonados y reflejados. Para más información sobre la peculiaridad subyacente en el comportamiento...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108566

A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the component Private Message Handler. Such manipulation of the argument nickname leads to cross site scripting. The attack c...

can-i-take-over-xyz

Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...

fav-up

Fav-up Búsquedas de IP real a partir del icono favicon y usando Shodan. Instalación pip3 install -r requirements.txt Clave de API de Shodan no la gratuita Uso CLI Primero define cómo pasas la clave de API: -k o --key para pasar la clave por stdin -kf o --key-file para pasar el nombre del archivo...

CVE-2025-61183

CVE-2025-61183 Stored XSS in User Avatar Upload via Unsafe SVG Handling Overview A Stored Cross-Site Scripting XSS vulnerability was identified in the vaahcms, specifically within the interaction between the file upload logic in MediaController.php and the storeAvatar method in UserBase.php,...

CVE-2025-0108

CVE-2025-0108 — WebSecurity PoC & Fix This repository contains a small lab environment for reproducing and mitigating the CVE-2025-0108 issue path confusion / header smuggling between Nginx and Apache. The goal of the assignment is to demonstrate how double-encoded requests can bypass...