EphemeralNet

EphemeralNet A secure P2P network with custom Relay for hostile NATs, built in C++20. Programmable forgetting for high-assurance peer-to-peer storage. Why EphemeralNet? Shardian designs infrastructure for teams that take deletion guarantees as seriously as confidentiality. EphemeralNet is our C++...

[SECURITY] Fedora 43 Update: hcloud-1.69.0-1.fc43

A command-line interface for Hetzner Cloud...

[SECURITY] Fedora 43 Update: cockpit-368-1.fc43

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

CVE-2026-73570

🔴 CVE-2026-73570 — RCE non authentifiée de gravité élevée ⚠️ Injection de commande OS non authentifiée → Exécution de code à distance Zimbra Collaboration Suite · Traitement des notifications SNMP 🧠 Aperçu CVE-2026-73570 est une vulnérabilité d'injection de commande OS de gravité élevée affectant...

CVE-2026-25253

CVE-2026-25253 OpenClaw RCE en 1 clic ★ CVE-2026-25253 OpenClaw Exécution de code à distance en 1 clic PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : Vulnérabilité d'exfiltration de jeton d'authentification OpenClaw description :...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL Injection Vulnerability in OpenEMR 8.0.0 Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...

FORTIWEB_CVE-2025-64446-58034

محاكاة استغلال FortiWeb CVE-2025-64446 & CVE-2025-58034 ملاحظة: هذا المستند مخصص لأغراض التعلم والبحث الأمني فقط. لا تستخدمه لمهاجمة الأنظمة دون إذن. 1. نظرة عامة FortiWeb هو جهاز جدار حماية تطبيقات الويب WAF يستخدم لحماية تطبيقات الويب. في عام 2025، تم اكتشاف ثغرتين خطيرتين: CVE-2025-64446 –...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 · Patch: React 19.0.1 / 19.1.2 /...

CVE-2023-21716

CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RCE Severity: Critical CVSS 9.8 Affected: Microsoft Word 2013 / 2016 / 2019 / 2021 unpatched Patch: Microsoft February 2023 Patch Tuesday Author: REGGYRAIDER Vulnerability Overview CVE-2023-21716 is a heap corruption vulnerability in...

[SECURITY] Fedora 44 Update: sudo-1.9.17-10.p2.fc44

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

[SECURITY] Fedora 44 Update: hcloud-1.69.0-1.fc44

A command-line interface for Hetzner Cloud...

CSRF-exploit-generator

CSRF-exploit-generator The CSRF Exploit Generator allows users to generate a CSRF exploit form with configurable parameters. CSRF-exploit-generator Features Input Target URL : Specifies the URL to be exploited. Input POST Parameters : Allows adding POST parameters to be sent via the CSRF request...

CVE-2025-47445-PoC

CVE-2025-47445 PoC This proof of concept is based on a school assignment where we wanted to find a vulnerable wordpress plugin and test said vulnerability in a local controlled environment. Info| ---|--- Wordpress plugin:| Wordpress Eventin Plugin version:| 4.0.26 or older CVE information:| Proje...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

SubGPT

SubGPT looks at subdomains you have already discovered for a domain and uses BingGPT to find more. Best part? It's free! The following subdomains were found by this tool with these 30 subdomains as input. call-prompts-staging.example.com dclb02-dca1.prod.example.com activedirectory-sjc1.example.c...

BypassFuzzer

Bypass Fuzzer The original 403fuzzer.py : ==Note: This has been deprecated for my new, shiny burp extension that is 1000000% better. Thank you for using my tools!== You can find the extension here: https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403ing endpoints for bypasses Perform variou...

SSH-Snake

SSH-Snake: Automated SSH-Based Network Traversal 🐍 SSH-Snake is a powerful tool designed to perform automatic network traversal using SSH private keys discovered on systems, with the objective of creating a comprehensive map of a network and its dependencies, identifying to what extent a network...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

FullBypass

FullBypass A tool which bypasses AMSI AntiMalware Scan Interface and PowerShell CLM Constrained Language Mode and gives you a FullLanguage PowerShell reverse shell. P.S Please do not use in unethical hacking and follow all rules and regulations of laws Usage: First, Download the bypass.csproj fil...