944487 matches found
CVE-2025-24016
CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...
LazyOwn
LazyOwn ā RedTeam Framework with AI agents, Linux BOF beacon, YARA+Nuclei marketplace 749 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The only OSS C2 with Linux BOF support + built-in YARA/Nuclei marketplaces. Install in one command curl -fsSL...
cve-2025-32433
CVE-2025-32433 - Pre-Auth RCE in Erlang/OTP SSH Server Link to detailed write-up All considered vulnerable versions using Docker: Erlang/OTP-25.3.2 Erlang/OTP-26.2.5.11 Erlang/OTP-27.3.2 Link to exploit Links to files for mass scanning: Template for active scanning Template for passive scanning...
CVE-2023-27163-exploit
CVE-2023-27163 ā request-baskets SSRF Exploit I wrote this exploit to target CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability found in request-baskets versions ā¤ 1.2.1. The flaw lives in the /api/baskets/name endpoint, where the forwardurl parameter allows an attacker to make the...
neo8-ghostlock-adaptation
iQOO Neo8 GhostLock Adaptation CVE-2026-43499 Device : iQOO Neo8 PD2301 Ā· Snapdragon 8+ Gen1 Ā· kernel 5.10.246-gki-gb142569a7856 Firmware : OriginOS PD2301A16.3.16.1.W10.V000L1 Vulnerability : CVE-2026-43499 GhostLock lineage, futex PI UAF Contents Path| Description ---|--- targets/| Neo8-specifi...
polytracker
PolyTracker PolyTracker is a tool originally created for the Automated Lexical Annotation and Navigation of Parsers , a backronym devised solely for the purpose of referring to it as The ALAN Parsers Project. However, it has evolved into a general purpose tool for efficiently performing data-flow...
gha-lab-456dd8a245
Automated research artifact ā not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at UniversitĆ© Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of skim-rs/skim at commit...
super-trouper
Super Trouper An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load,...
aurora-demo-lockfile
aurora-demo-lockfile Demo target for AURORA ā the UiPath for Coding Agents challenge submission at mlbrilliance/uipath-for-coding-agents. This repo intentionally contains three vulnerable lockfiles so AURORA's Maestro process OssSupplyChainDefender has something to detect, triage, and remediate. ...
Snyk Scan
Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: - pipe: snyk/snyk-scan:1.0.2 variables: SNYKTOKEN: ""...
Sangfor-CVE-2025-12916
Sangfor-CVE-2025-12916 Sangfor CVE-2025-12916 Remote Command Execution Vulnerability Batch Detection Tool || Author: Jinxia Security Sangfor OSM Vulnerability Batch Detection Tool A batch detection tool for the CVE-2025-12916 remote command execution vulnerability in Sangfor Operation and...
CVE-2019-9978
CVE-2019-9978 ā Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. š Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...
osquery-defense-kit
osquery-defense-kit osquery queries for Detection & Incident Response, containing 250+ production-ready queries. ODK osquery-defense-kit is unique in that the queries are designed to be used as part of a production detection & response pipeline. The detection queries are formulated to return zero...
CVE-2020-17530-s2-061
CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the corresponding buttons and...
openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy
A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...
openssh: OpenSSH: sftp client allows attacker to control downloaded file location
A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...
CVE-2026-108982
VeraCrypt 1.26.29 FUSE-T build on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service go-nfsv4 and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the...
sqlmate
sqlmate There are some features that we think SQLMap should have. Like finding admin panel of the target, better hash cracking etc. If you think the same, SQLMate is for you. What it does? Feed it a SQL injection dork via --dork option and it will find vulnerable sites for you. After that, it wil...
emacs: emacs: Command injection via crafted filenames in TRAMP
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...
Important: Red Hat Security Advisory: emacs security update
An update for emacs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...