CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

CVE-2025-9267

CVE-2025-9267 Description In Seagate Toolkit on Windows there is an insecure DLL-loading vulnerability in the Toolkit Installer prior to version 2.35.0.6 where the installer attempts to load DLLs from the current working directory without validating their origin or integrity. An attacker who can...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDetection" Update Check Remote Code Execution Vulnerability. Usage: python3 cve-2022-27438poc.py Details in the report at gerr.re. Steps to reproduce For other affected products, you have to change the update server and update configuratio...

Root-My-Galaxy-tests

Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are maintained in...

PT-2026-118323

A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api plugins.php of the component Plugin Installer. Such manipulation of the argument plugin file leads to unrestricted upload. The attack may ...

sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

CVE-2025-51726

As requested, I have now demonstrated both vulnerabilities BA2022 & BA2015 with practical exploitation scenarios and PoC evidence, which shows how an attacker could abuse these issues in a real-world context. 📌 1. BA2022 Weak Hash in Code Signing – SHA-1 Exploitation Demonstration Although the...

Firefox-Security-Toolkit

Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...

katoolin

katoolin Automatically install all Kali linux tools Features Add Kali linux repositories Remove kali linux repositories Install Kali linux tools Requirements Python 2.7 An operating system tested on Ubuntu Installation sudo su git clone https://github.com/LionSec/katoolin.git && cp...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2025-49144_PoC

CVE-2025-49144PoC 📌 CVE-2025-49144 is a high-severity local privilege escalation vulnerability found in the Notepad++ v8.8.1 and prior version installers. This vulnerability stems from uncontrolled executable search path behavior during installation, allowing a local attacker to gain SYSTEM-level...

CVE-2026-107571

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...

CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

CVE-2026-107571

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are affected by incorrect default permissions in the Windows installer. If the product is installed in a folder inheriting permissions from a writable parent (such as the root of an NTFS volume), a local authenticated user can gain code e...

CVE-2026-107571 Incorrect Default Permissions in hMailServer

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...

EUVD-2026-104410

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

Lazymux

Lazymux Lazymux tools installer is very easy to use, only provided for lazy termux users; it's huge list of Many Hacking tools and PEN TESTING! NOTE: Am not Responsible of bad use of this project. Screenshot Requirements • Linux environment • Python 2.x • git Installation and Using Lazymux git...

CVE-2026-86375

Dell Application Installer , versions prior to 26.09.0.1 , contains a Missing Encryption of Sensitive Data vulnerability (CWE-311). An unauthenticated attacker with local access could potentially exploit this flaw to gain Unauthorized access to sensitive information. Remediation is available via ...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...