LiveTargetsFinder

LiveTargetsFinder Genera elenchi di host live e URL per il targeting, automatizzando l'uso di Massdns, Masscan e nmap per filtrare host non raggiungibili Dato un file di input con nomi di dominio, questo script automatizza l'uso di MassDNS per filtrare gli host non risolvibili, e poi passa i...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape per RealWorld CTF 2020/2021 Demo Cosa? Questa è la nostra soluzione per la sfida "Box Escape" di RealWorld CTF dalle qualificazioni 2020/2021. Attualmente una 0day ma aggiungeremo il numero CVE appena ci sarà. CVE-2021-2119 Come funziona?...

CVE-2026-56709

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2026-56709

Grav before 3.9.2 is vulnerable to a Host header injection in the sendInvitationEmail() function. When constructing token-bearing invitation links, the unvalidated Host header allows an attacker to poison the link and redirect users to an attacker-controlled domain . This bypasses the require_tru...

EUVD-2026-65207

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

CVE-2026-56709 Grav before 3.9.2 Host Header Injection via sendInvitationEmail

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

wp-allowed-hosts

WP Allowed Hosts Dieses Plugin wurde erstellt, nachdem die Schwachstelle CVE-2017-8295 offengelegt wurde, dieses Plugin schützt Sie ohne Aufwand vor diesem Angriff – fügen Sie einfach eine Zeile in Ihre wp-config.php ein. Installation Laden Sie das Plugin einfach von hier herunter und laden Sie e...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

CVE-2026-77310

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2019-5736-POC

Evadire Docker tramite RunC Un codice proof of concept per CVE-2019-5736 Questo POC è fortemente basato sul POC di YuvalAvra. Non rivendico alcun credito per il codice utilizzato in questo POC. Maggiori informazioni su questa vulnerabilità e una dimostrazione di come può essere sfruttata sono...

CVE-2026-77310

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-58138 — Conductor Unauthentifizierte RCE über INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … vor 3.30.2 wertet benutzerbereitgestelltes JavaScript in INLINE und LAMBDA / DOWHILE / SWITCH Aufgaben mit einem GraalVM-Kontext aus, der mit vollem Host-Zugriff HostAccess.ALL erstellt...

CVE-2026-49468-LiteLLM-Auth-Bypass

CVE-2026-49468 — Bypass di autenticazione non autenticato in LiteLLM tramite confusione di route dell'Host-Header Bypass di autenticazione/autorizzazione pre-autenticazione nel proxy LiteLLM BerriAI. Un singolo header Host manipolato fa sì che il proxy valuti la sua decisione di autenticazione...

BadHost-CVE-2026-48710-Exploit

BadHost – CVE-2026-48710 Scanner Nur-Erkennungs-Scanner für den BadHost -Authentifizierungsumgehungsangriff in Starlette / FastAPI – bei dem die Auth-Middleware request.url.path anstelle von request.scope"path" liest, sodass ein präparierter Host-Header einen erlaubten Pfad einschleusen und die...

CVE-2026-71917 DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...