EUVD-2026-126013

A security vulnerability has been detected in DrayTek Vigor2960 up to 1.5.1.6. Affected by this vulnerability is the function sub14914 of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument swmconfigupload leads to command injection. It is possible to initiate the attack remotely...

CVE-2026-129452 DrayTek Vigor2960 mainfunction.cgi set_table command injection

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function settable of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the...

EUVD-2026-126018

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function settable of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2026-129452 DrayTek Vigor2960 mainfunction.cgi set_table command injection

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function settable of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the...

dvwaXSSkelompok6

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

Exploit for Race Condition in Apache Http_Server

CVE-2026-119618 — Apache HTTP Server modhttp2 / modh2 C...

CVE-2026-129449

A security vulnerability has been detected in DrayTek Vigor2960 up to 1.5.1.6. Affected by this vulnerability is the function sub14914 of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument swmconfigupload leads to command injection. It is possible to initiate the attack remotely...

CVE-2026-129449

The DrayTek Vigor2960 router (up to version 1.5.1.6 ) is vulnerable to a command injection flaw. The issue resides in the sub_14914 function within the /cgi-bin/mainfunction.cgi file, where improper handling of the swmconfigupload argument allows for remote execution. This vulnerability has been ...

CVE-2026-129449 DrayTek Vigor2960 mainfunction.cgi sub_14914 command injection

A security vulnerability has been detected in DrayTek Vigor2960 up to 1.5.1.6. Affected by this vulnerability is the function sub14914 of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument swmconfigupload leads to command injection. It is possible to initiate the attack remotely...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

citrixInspector

citrixInspector citrixInspector.py formerly cve20233519inspector.py is a Python-based, passive vulnerability scanner for Citrix ADC / Citrix Gateway / NetScaler ADC / NetScaler Gateway appliances. It fingerprints the exact firmware build of a target without authentication, and reports every known...

CVE-2014-6271

CVE-2014-6271 A vulnerability known as "ShellShock" exists in GNU Bash through 4.3 due to how it processes trailing strings in the values of environment variables after function definitions. This vulnerability enables remote attackers to execute arbitrary code by crafting the environment in certa...

CVE-2024-32444

CVE-2024-32444 As of 24/01/25 this vulnerabiltiy does not have a patch hence this is simply a product detection template as all products associated with the RealHome wordpress theme are vulnerable. The theme allows users to register new accounts via the inspiryajaxregister function, however, it...

WapGuard

WAP Guard A tiny Android app that cleans up after the "SMS of Death" CVE-2026-58882: a malformed WAP Push SMS that crashes com.android.phone, drops calls, and stays queued so the crash repeats until the message is removed. WAP Guard does not prevent the crash , because only the Android security...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

semgrep-rules

elttam's semgrep-rules Welcome to elttam's public semgrep rules repository...

CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept

CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 Simulation ⚠️ Educational Purposes Only This project demonstrates a proof-of-concept exploiting WebDAV and .url file delivery to achieve realistic remote code execution. It includes a decoy-based executable and a controlled simulation of...

pandorafms_7.44

Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE allows an authenticated user to achieve remote command execution via the events feature. Can be done with credentials or a PHP session cookie. Getting Started Executing program Using credentials python3 pandorafms7.44.py -t...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC Kubernetes MitM attacks via IPv6 rogue router advertisements For educational purposes only Requirements Kubernetes cluster with the following kubelet version kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6...