git-vuln-finder

git-vuln-finder Trova potenziali vulnerabilità software dai messaggi dei commit git. Il formato di output è un JSON con il commit associato che potrebbe contenere una correzione relativa a una vulnerabilità software. La ricerca si basa su un insieme di espressioni regolari esclusivamente sui...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

CVE-2026-76956

A flaw was found in libexpat. This vulnerability arises from the software misinterpreting a return code, leading to insufficient randomness entropy for hash functions. A remote attacker could exploit this by sending specially crafted XML content, triggering hash flooding attacks. This can result ...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Kraken

Kraken Kraken, una webshell modulare multi-linguaggio programmata da @secux11. Requisiti • Supporto • Installazione • Utilizzo • Utilizzo avanzato • Contribuire • FAQ • Riconoscimenti Kraken è una webshell modulare multi-linguaggio focalizzata sul post-exploit web e l'evasione delle difese...

log4shell-rex

Log4Shell-Rex The following RegEx was written in an attempt to match indicators of a Log4Shell CVE-2021-44228 and CVE-2021-45046 exploitation. If you run a version from pre 2021/12/21, it's highly recommended to test and update. I've removed some quirks and enhanced performance. The Regex aims...

cisco-rce

CVE-2017-3881 Cisco IOS esecuzione di codice remota =================== Questo repository contiene il codice Proof-of-Concept per sfruttare la vulnerabilità di esecuzione di codice remota divulgata da Cisco Systems il 17 marzo 2017 -...

CVE-2022-39952

CVE-2022-39952 POC per CVE-2022-39952 che colpisce Fortinet FortiNAC La configurazione predefinita di questo exploit scrive un cron job per creare una reverse shell. Assicurati di modificare il file payload per adattarlo al tuo ambiente. Analisi Tecnica Un'analisi tecnica della causa principale...

EaST

«EAST» – «Exploits And Security Tools» framework di penetration testing. 1. Panoramica L'ambiente del framework pentest è la base del kit di strumenti dello specialista di sicurezza informatica. Questo software è essenziale sia per apprendere e migliorare le conoscenze sugli attacchi ai sistemi...

CodeAlpha_Secure_Cloud_Registration

No d...

EUVD-2026-66672

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-74771

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-74771

Dell PowerProtect One versions 20.1.0.0 and below are affected by an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote network access could exploit this flaw to cause information tampering , with no user interaction required. The CVSS 3.1 base s...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...

GhostESP

La piattaforma di ricerca wireless open-source per ESP32. Trasforma una scheda ESP32 da 10–20 $ in uno strumento di ricerca wireless con un'interfaccia touchscreen completa - senza saldature, senza Arduino IDE. Nuovo su GhostESP? Procurati un dispositivo compatibile e sarai operativo in meno di 5...

WhatCMS

WhatCMS.sh CMS Erkennungs- und Exploit-Kit basierend auf der Whatcms.org API. Einleitung Whatcms.sh kann derzeit die Nutzung von mehr als 330 verschiedenen CMS -Applikationen und -Diensten erkennen und anschließend eine Liste von geeigneten Sicherheits-Audit-Tools für das erkannte CMS anzeigen. S...

dirty_sock

dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...

dirty_sock

dirtysock: Privilege Escalation su Linux tramite snapd A gennaio 2019, è stato scoperto che le versioni correnti di Ubuntu Linux erano vulnerabili a un'escalation locale dei privilegi a causa di un bug nell'API di snapd. Questo repository contiene il POC originale dell'exploit, reso disponibile p...

CVE-2023-21608

CVE-2023-21608 Discord Server यह बग Use after Free था, जो resetForm ऑपरेशन के दौरान ऑब्जेक्ट मेमोरी संदर्भों को संभालते समय हुआ। ब्लॉग Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 परामर्श CVE-2023-21608 डेमो...