CVE-2024-27348-Apache-HugeGraph-RCE

Vulnerabilidad de Ejecución Remota de Código en Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 es una vulnerabilidad crítica de Ejecución Remota de Comandos RCE en Apache HugeGraph Server, un popular sistema de base de datos de grafos. La falla reside en la interfaz del lenguaje de recorri...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / root@kitploit: Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright ...

CVE-2021-35042

CVE-2021-35042 Django SQL injection bug Question: explore how exploitable is it? Answer: I'm terrified Install poetry install poetry run ./manage.py migrate poetry run ./manage.py loaddata dummydata.json Interactive Demo poetry run ./manage.py runserver Ordering by random fields go to...

TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability. Task 1 Introduction Confluence | Your Remote-Friendly Team Workspace | Atlassian NVD -...

Lab4PurpleSec

Lab4PurpleSec Note : This project was previously named "Lab4OffSec" and has been renamed to "Lab4PurpleSec" to better reflect its Purple Team focus. Note : This is a V1. Feedback and contributions are welcome. 📜 License Notice : The use of this project including for CTFs, commercial projects,...

RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555 streaming media RTSPServer lookForHeader code execution vulnerability CVE-2018-4013 Summary An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library. A specially crafted packet can cause a stack-based buff...

sjet

sJET de siberas siberas JMX Exploitation Toolkit sJET permite una explotación fácil de servicios JMX configurados de forma insegura. Información adicional de antecedentes se puede encontrar aquí y aquí. Requisitos previos Jython 2.7 Uso SJET implementa una interfaz CLI usando argparse:...

PRISM-AP

PRISM-AP ABOUT: PRISM-AP is an automated Wireless RogueAP MITM attack framework. FEATURES: Easy to setup and use and full automated Leverages MANA wifi attack to lure client connections Partial HSTS bypass via bettercap Intercept and view all HTTP headers, cookies and URL's View all DNS requests...

nox-framework

root@kitploit: ███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis...

nox-framework

███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Marco de Inteligencia contra Amenazas Cibernéticas Marco OSINT para red teaming, análisis forense digital y análisis de exposición corporativ...

CVE-2021-40444_builders

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...

tinyos-rtos

TinyOS — RTOS ultra-ligero para IoT Un sistema operativo en tiempo real ultraligero para dispositivos IoT y empotrados con recursos limitados. Huella del kernel inferior a 10 KB, 2 KB de RAM mínima, planificación basada en prioridades con desalojo. Características Categoría| Detalles ---|---...

python-codext

CodExt Codificar/decodificar cualquier cosa. CodExt es una biblioteca compatible con Python 2 y 3 que extiende la biblioteca nativa codecs especialmente para agregar nuevas codificaciones y mapeos de caracteres personalizados y proporciona más de 120 nuevos códecs , de ahí su nombre que combina...

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

pentest-guide

Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...

log4j-CVE-2021-44228-test

log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...

CVE-2025-32463

La versión 1.9.17 de Sudo tiene una vulnerabilidad crítica CVE-2025-32463 que permite a usuarios locales obtener acceso root explotando la opción chroot, lo que puede conllevar graves riesgos de seguridad. Se recomienda a los usuarios actualizar a la versión 1.9.17p1 o posterior para mitigar este...

CVE-2026-48710

CVE-2026-48710 Principio: Starlette es un framework ASGI ligero y de código abierto para Python. El problema surge de que el framework Starlette, al procesar la estructura de datos de la URL, confía en el host enviado por el cliente y lo concatena directamente a la variable url para el posterior...