CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE This repository contains a Proof of Concept PoC for the vulnerability CVE-2025-62222. It demonstrates how Remote Code Execution RCE can be achieved on a developer's machine by manipulating the context of GitHub Copilot Chat in VS Code via hidden promp...

xtor

xtor Python library for managing Tor instances programmatically. Features Launch new Tor processes or connect to existing ones Pre-configured httpx clients sync + async with SOCKS5 proxy Identity rotation with optional wait-for-new-IP Stream isolation for traffic separation Circuit and stream...

xz-cve-2024-3094

root@ubuntu:/xz/ apt update root@ubuntu: /xz/ apt install -y gcc g++ vim net-tools make cmake build-essential libncurses-dev flex bison libssl-dev libelf-dev bc liblz4-tool liblz4-dev liblzma-dev ... ... root@ubuntu:/xz/ bash ./decode.sh root@ubuntu: /xz/ tar xf xz-5.6.1.tar.xz && cd xz-5.6.1...

CVE-2019-17137

CVE-2019-17137 Info CVE: https://vulners.com/cve/CVE-2019-17137 POC GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

LiveHiddenCamera

Live Hidden Camera Live Hidden Camera LHC is a library which record live video and audio from Android device without displaying a preview. Motivation I'm working on a research based Android Malware and decided to create a multi function RAT Remote Administration Tool. I was working on Live Stream...

CVE-2019-20372

REFER https://bertjwregeer.keybase.pub/2019-12-10%20-%20errorpage%20request%20smuggling.pdf Chạy Server docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6 Khai thác printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET...

x8-Burp

This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...

CVE-2021-29156

CVE-2021-29156 done right This Proof of Concept is realized because the other PoC publicly available is broken ✨ Install go install github.com/5amu/CVE-2021-29156@latest References https://nvd.nist.gov/vuln/detail/CVE-2021-29156 https://portswigger.net/research/hidden-oauth-attack-vectors...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

CVE-2026-84434

CVE-2026-84434 — Gravity Forms Unauthenticated Arbitrary File Upload Python 3 PoC scanner and exploit for CVE-2026-84434 in Gravity Forms. | ---|--- Plugin| gravityforms Affected| ≤ 3.1.0.4 Fixed in| 3.1.0.5+ vendor security release 3.1.1 CVSS| 9.8 Critical Auth| Unauthenticated CWE| CWE-434 —...

twoface

"Two-Face" Rust Linux binary An executable file that runs a harmless program most of the time, but will run a different, hidden code if deployed on a specific target host. See Creating a "Two-Face" Rust binary on Linux. Usage You need a Rust build environment for example from rustup. A nightly...

ParamFinder

ParamFinder Discover hidden parameters straight from Caido! Installation Via Community Store Recommended 1. In your Caido, go to the Plugins page 2. Navigate to the Community Store 3. Search for ParamFinder 4. Click Install 5. Done! 🎉 Manual Installation 1. Navigate to the Releases page 2. Downlo...

uptime-kuma-setup-toctou

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · uptime-kuma-setup-toctou uptime-kuma-setup-toctou Uptime Kuma 2.5.5 - Louis Lam First-run Socket.IO setup COUNTs users, bcrypts at cost 10, then INSERTs. Username is UNIQUE only. There is no transaction, mutex, or...

exfil-scan

exfil-scan Scan LLM outputs and AI-generated content for data exfiltration signals before they reach users, logs, or downstream systems. 1 Why exfil-scan exists Modern LLM applications routinely process sensitive prompts, internal documents, API responses, and user data. That creates a new securi...

sliver-tor-bridge

sliver-tor-bridge tor-based transport bridge for sliver c2. creates a hidden service and proxies traffic to your sliver server so your real ip is never exposed. what it does sets up a tor hidden service that points to a local http proxy. the proxy forwards everything to sliver's https listener...

torchat

TorChat - Anonymous P2P Chat Secure, private, and anonymous peer-to-peer chat over the Tor network. What is TorChat? its a lightweight, privacy-first messaging tool that lets you communicate directly with others over the Tor network—without any central servers. It's designed for those who care...

dexfinder

dexfinder English | 中文 | Website Website : junelegency.github.io/dexfinder Cross-platform APK/DEX method & field reference finder with call chain tracing, ProGuard/R8 deobfuscation, and Android hidden API detection. Inspired by Android's veridex tool, reimplemented in Go with enhanced capabilitie...

CVE-2026-110691

The WPOrLogin WordPress plugin (versions before 3.1.0 ) is vulnerable to an unauthenticated hide login slug update vulnerability. The root cause is a failure to perform a capability check or nonce validation when updating the plugin's hidden-login URL settings. An unauthenticated attacker could e...