cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . 자동 설치 스크립트 What is Cuckoo Sandbox? Cuckoo Sandbox는 악성코드 분석 시스템입니다. What does that mean? 즉, 의심스러운 파일을 던져 넣으면 격리된 환경에서 해당 파일의 동작에 대한 상세 보고서를 받을 수 있습니다. 우리는 처음에 Buguroo Offensive Security 에서 이 스크립트를 만들어 고통스러운 cuckoo 설치 과정을 더 빠르고, 쉽고, 간편하게 만들었습니다. Supported...

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites 플러그인 CSRF Exploit - Plugin Installation body font-family: Arial, sans-serif; text-align: center; background: f4f4f4; padding: 20px; h1 color: d9534f; h2 color: 5bc0de; .output margin-top: 20px; padding: 10px; ba...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

CVE-2026-70553-PoC

CVE-2026-70553 - MaxSite CMS Unauthenticated RCE Proof-of-Concept for CVE-2026-70553: Unauthenticated Remote Code Execution in MaxSite CMS via persistent PHP code injection into database.php through the install endpoint. Disclaimer This PoC is for educational and authorized security research...

chromebackdoor

Chrome browser backdoor VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go python chromebackdoor.py user: root pass:...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

EUVD-2026-91157

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

A vulnerability exists in ManagedProvisioning prior to SMR Sep-2026 Release 1 due to improper access control . This flaw allows local attackers to install arbitrary applications on the affected system. Specific exploit details are not provided in the documents.

PT-2026-104138

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

PT-2026-104067

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...