MalDev

MalDev Hey! Welcome to my repo : I am Captain Magma, a passionate individual dedicated to cybersecurity, malware development, and analysis. The design for this repository is to manage my MalDev road-path as I learn and update this repository with my notes and code. I am not the author of any of...

CVE-2024-2876

CVE-2024-2876 - ثغرة حقن SQL في إضافة Email Subscribers من Icegram Express نظرة عامة CVE-2024-2876 هي ثغرة أمنية حرجة تم اكتشافها في إضافة "Email Subscribers by Icegram Express" لنظام WordPress. تؤثر هذه الثغرة على الإصدارات حتى 5.7.14 وتشكل مخاطر كبيرة على أكثر من 90,000 موقع ويب. تفاصيل الثغرة...

nmap-log4shell

Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...

CVE-2024-43018

CVE-2024-43018 Assign an ID Be officially populated in CVE - Mitre Index Description Technologies used Source and Sink How to execute it Fix Authors Description While investigating for the thesis https://hdl.handle.net/10316/118126 and https://hdl.handle.net/10316/118059 a new vulnerability on...

ClawGuard

ClawGuard 🛡️ النسخة الصينية مشروعنا:https://github.com/SafeAgent-Beihang/clawguard ClawGuard عبارة عن مجموعة أدوات أمنية مصممة للتخفيف من المخاطر المرتبطة بالوكلاء المستقلين، مثل OpenClaw والكيانات الأخرى القائمة على LLM. ومع اكتساب الوكلاء مزيدًا من الاستقلالية لتنفيذ الأكواد والوصول إلى واجهات...

CVE-2017-8046

DISCLAIMER: This repository is supplementary to the VGS blog post, How to Avoid "Using Components with Known Vulnerabilities". It contains an application with a known security vulnerability namely, CVE-2017-8046, as well as the description of how to exploit it. Use the application at your own ris...

log4shell-homework9

Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...

HuaWei_Route_HG532_RCE_CVE-2017-17215

HuaWeiRouteHG532RCECVE-2017-17215 POCsuite and goland implementation of Huawei HG532 router command injection CVE-2017-17215 POC goland Implementation POCsuite Implementation For writing and code, please refer to: https://blog.csdn.net/qq41490561/article/details/127659604...

Exploits

Exploits CVE originales, PoC d'exploits et avis de sécurité par @kmkz · boffsec-services.com · @kmkzsecurity 2026 Fichier| Cible| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Avis chaîne de 3 CVE| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghel...

weblogic_cve-2019-2890

1）Start the XXER tool python xxer.py -H 192.168.17.223 2）Place the xxer PoC into the xx.xml file, replace the serialized data, and inject the xxer PoC; java -jar weblogicxxe.jar xx.xml 3）Use weblogic.py from the java-deserialization-exploit tool to send data to the Weblogic server python...

CVE-2024-36837

CVE-2024-36837 / CNVD-2024-30128 POC اكتب عنوان URL في ملف url.txt ثم شغّل CVE-2024-36837.py CVE-2024-36837 في سنتي الأولى بالجامعة، اكتشفت أن إحدى المؤسسات التعليمية تستخدم CRMEB Mall كمتجر إلكتروني ضمن حملة حماية الإنترنت. بعد الاختبار، تم اكتشاف ثغرة حقن SQL. بعد إعداد بيئة محلية، وُجدت الثغرة...

CVE-2024-10914

cve-2024-10914 Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection...

Advanced-Loader-Reverse-Engineering

From Shellhost to 3 DLLs: Analyzing an Advanced Loader with Payload Injection, CFG Bypass, and Downgrade Attacks Overview This analysis covers a sophisticated multi-phase loader targeting Shellhost.exe, amsi.dll, mstscax.dll, and clbcatq.dll. The loader uses module stomping, CFG bypass, COM...

CVE-2025-4840

CVE-2025-4840 Likes and Dislikes Plugin = 1.0.0 - Unauthenticated SQL Injection Description The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied...

wardgate

Wardgate - AI Agent Security Gateway Wardgate is a security gateway that sits between AI agents and the outside world -- isolating credentials for API calls, isolating SSH keys for remote command execution, and gating command execution in remote environments conclaves. Give your AI agents access ...

CVE-2019-9053-CMS46635-python3

CVE-2019-2019-9053--CMS46635 CMS Made Simple 2.2.10 - SQL Injection python3...

p3-loader

P³-Shellcode Loader - Empoisonnement des paramètres de processus Auteurs : Max Hirschberger & Ogulcan Ugur Sommaire 1. Introduction 2. Injection de processus typique et API système impliquées 3. Fondements techniques des mécanismes internes de Windows requis 3.1 API de création de processus et...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 Security Research Statement This project is intended solely for security research and educational purposes. Using this tool for unauthorized testing is illegal. The author is not responsible for any misuse or damage. 📋 Overview CVE-2024-31317 is a critical security...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 Vulnerability Lab Overview This laboratory environment demonstrates CVE-2023-6933, a critical PHP Object Injection vulnerability in the Better Search Replace WordPress plugin versions ≤1.4.4. Vulnerability Details CVE ID : CVE-2023-6933 CVSS Score : 9.8 Critical Affected Plugin :...

CVE-2024-4577

استغلال CVE-2024-4577 PoC الوصف يحتوي هذا المستودع على استغلال إثبات المفهوم PoC لثغرة CVE-2024-4577، وهي ثغرة حرجة تؤثر على جميع إصدارات PHP التي تعمل على نظام Windows. تسمح هذه الثغرة للمهاجمين بتنفيذ تعليمات برمجية عشوائية عن بُعد. كما تؤثر هذه العيوب على بيئة التطوير XAMPP المثبتة على أنظمة...