CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable UTF-16 encodin...

EUVD-2026-112560

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function arrayfromfile of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The attack is possible to be carried out remotel...

Typecho-Multiple-Vulnerabilities

Typecho Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2024-35538: In Typecho v1.3.0 there is a Client IP Spoofing vulnerability, which allows malicious actors to falsify their IP addresses by specifying an arbitrary IP as value of...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 SISQUALWFM Host Header Injection Vulnerability This repository contains information related to a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which allows an attacker to manipulate webpage links or redirect users to a malicious site. This...

CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

CVE-2023-38836

CVE-2023-38836 Exploit File Upload vulnerability in BoidCMS v.2.0.0 allows an authenticated attacker to upload a file with dangerous type CWE-434. To exploit, an attacker could add a GIF header to bypass MIME type checks. GIF89a; Usage usage: CVE-2023-38836.py -h -u URL -U USER -P PASSWD -l LHOST...

cve-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...

php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

-cve-2021-45232

Get Full Article Soon On https://Hellofhackers.com...

log4j

log4j An automated header extensive scanner for detecting log4j RCE CVE-2021-44228 Usage $ python3 log4j.py -l urls.txt --dns-log REPLACETHIS.dnslog.cn...

HTTPoxyScan

HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

CVE-2017-5638-PoC

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repository contains a Proof of Concept PoC script demonstrating the Remote Code Execution RCE vulnerability identified as CVE-2017-5638 in Apache Struts 2. Vulnerability Details CVE ID: CVE-2017-5638 Affected Software: Apache Struts 2 versio...

CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

dotnetfile

dotnetfile dotnetfile is a Common Language Runtime CLR header parser library for Windows .NET files built in Python. The CLR header is present in every Windows .NET assembly beside the Portable Executable PE header. It stores a plethora of metadata information for the managed part of the file...

py-log4shellscanner

PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...

CVE-2023-4294

CVE ID : CVE-2023-4294 Vulnerability Type : Cross-Site Scripting Description : The URL Shortify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the referrer header in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes ...

peanalyzer

peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...

cve-2026-22732-poc

CVE-2026-22732 — Proof of Concept Spring Security silently drops HTTP response security headers. Demo / educational use only; run it against nothing but this local app. | ---|--- CVE| CVE-2026-22732 CWE-425, published 2026-03-19 CVSS 3.1| 9.1 CRITICAL — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Direct...