940894 matches found
evillimiter
Evil Limiter This project is a maintained fork of bitbrute/evillimiter. The upstream repository is no longer maintained, so this fork continues development - bug fixes, new features, and compatibility updates. See Fork-specific changes below. A tool to monitor, analyze and limit the bandwidth...
kismet-docs
DEPRECATED This repo is now merged into the kismet-web-docs repo, and all future changes should go there. The new site engine uses Hugo, and a number of the documentation parts have been converted to YAML data with templates...
xsshunter-express
XSS Hunter Express Sets up in 5 minutes and requires no maintenance The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities. Setup Five minutes, try not to skim too much Requirements docker and docker-compose installed Host with at least 2 GB of RAM A...
zairo
Measuring zairo zairo's unit tests check that it builds the right prompts and handles answers correctly. They can't tell you whether a model, given those prompts, finds a vulnerability a change introduced, or flags one that isn't there. That's what this directory is for: a set of labelled changes...
CVE-2021-44906
CVE-2021-44906 Originally from: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip Run npm run hack And you will see the any function's done property is changed to true. The explanation of command line node index.js --.concat.constructor.prototype.done true:...
CVE-2025-29927-Nextjs-Bypass-PoC
PoC: CVE-2025-29927 - Next.js Middleware Bypass This repository contains a Proof of Concept PoC demonstrating how to bypass middleware security checks in Next.js v13.5.6 by exploiting a vulnerability related to internal HTTP headers. Vulnerability Overview: CVE-2025-29927 What is it? CVE-2025-299...
CVE-2024-28397-exploit
js2py Sandbox Escape CVE-2024-28397 Exploit for remote command execution RCE via sandbox escape in js2py = 0.74. Allows arbitrary code execution on the host system through insecure JavaScript evaluation. Vulnerability CVE : CVE-2024-28397 Component : js2py Affected versions : = 0.74 Impact : Remo...
Empire
Empire Empire ĆØ un framework di post-exploitation e adversary emulation utilizzato per supportare i Red Team e i Penetration Tester. Il server di Empire ĆØ scritto in Python 3 ed ĆØ modulare per consentire flessibilitĆ all'operatore. Empire include nativamente un client che puĆ² essere utilizzato da...
external_expact_AOSP10_r33_CVE-2022-25315
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
js2py-Sandbox-Escape-CVE-2024-28397-RCE
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of exploit scripts targeting the js2py sandbox escape vulnerability CVE-2024-28397 that allows arbitrary code execution through Python object introspection. š Vulnerability Overview The js2py library contains a critical sandbox escape...
WG-CVE-2026-1555-Linux
āāāāāāāāāā āāāāāāāāāāā āāāāāāā āāāāāāā āāāāāāā āāāāāāā āāāāāāāāāāā āāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāā āāāāāāāāā āāāāāāāāāāāāāāāā āāāāāāāāāāāāāāā āāā āāāā āāāāāāāāāā āāāāāāā āāāāāāāāāāāāāāāā āāāāāāāāā āāāāāāāā āāāāāāā āāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāā āāāāā...
CVE-2022-24706
CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...
CVE-2025-4427-CVE-2025-4428
CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth remote code execution vulnerability in EPMM's DeviceFeatureUsageReportQueryRequestValidator. It arises from the unsafe handling of user-supplied input within error messages processed via Springās AbstractMessageSource, which allows...
CVE-2023-34468
CVE-2023-34468 ā Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...
ASC
Droid ASC: R8 Compiler Optimization as a DeCompiler Primitive https://blackhat.com/europe/arsenal/schedule/index.htmldroid-asc-r8-compiler-optimization-as-a-decompiler-primitive-54834 When decompiling massive Android APKs, the standard procedure is to wait. We wait for tools to eat gigabytes of...
CVE-2026-4480-PoC
CVE-2026-4480-PoC CVE-2026-4480 ā InyecciĆ³n de Comandos en el Nombre del Trabajo de ImpresiĆ³n de Samba Resumen CVE-2026-4480 es una vulnerabilidad de inyecciĆ³n de comandos que afecta a ciertas configuraciones de impresiĆ³n de Samba que utilizan comandos de impresiĆ³n externos. La vulnerabilidad...
CVE-2026-27971_POC
CVE-2026-27971 ā Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...
CVE-2025-63296
CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...
CVE-2022-40471
CVE-2022-40471 ā CPMS Authenticated File Upload RCE š Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...
cve-2025-55182-scanner
CVE-2025-55182 / CVE-2025-66478 Vulnerability Scanner React Server Components Flight Protocol Remote Code Execution Detection Tool Executive Summary This scanner identifies systems potentially vulnerable to CVE-2025-55182 React and CVE-2025-66478 Next.js, critical unauthenticated remote code...