cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...

wingdata

Wingdata — HackTheBox Walkthrough Platform: HackTheBox | OS: Linux Attack Chain VHost enumeration finds a WingFTP server. CVE-2025-47812 command injection gives initial access. Root via a sudo Python restore script that extracts a crafted tar archive — tar path traversal writes an arbitrary file ...

CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...

CrushFTP-auth-bypass-CVE-2025-31161

CrushFTP Authentication Bypass - CVE-2025-31161 A comprehensive toolkit for exploiting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP that allows unauthorized user account creation. 🔍 What is CVE-2025-31161? CVE-2025-31161 is a critical authentication bypass vulnerability in...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ataques SSRF Resumen Información del sitio web del fabricante：https://maccms.pro Dirección de descarga del código fuente ： https://github.com/maccmspro/maccms10.git Versión afectada: V2021.1000.2000 2.Detalles de la vulnerabilidad...

CVE-2017-15394

CVE-2017-15394 A URL spoofing flaw has been found in the extensions UI of the Chromium browser 62.0.3202.62. An IDN homograph attack demo in Chromium through extensions. 1. Load unpacked extension into Chrome 2. View extension details and observe lack of punycode Impact An attacker would leverage...

FolkPatch

🌏 README Language: English / 中文 / 日本語 FolkPatch - A Root management tool focused on interface optimization and feature extension Built on KernelPatch, FolkPatch delivers a stable Root experience along with a brand-new interface and a three-tier extension system: APM / KPM / Plugins. Get started...

CVE-2026-19745

Introduction Hi everyone, back in May I found decent vulnerablities in my router, today I can finally show everyone! Both vulnerablities in this repo are authenticated Denial of Service vulnerablities! I do not know the exact techial details of how or why these vulnerablities work, we never got a...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

CVE-2016-3113

CVE-2016-3113 PoC Una prueba de concepto para explotar la vulnerabilidad XSS reflejado en la interfaz web de oVirt RedHat. En esta PoC, se inicia una máquina virtual en el entorno IaaS de oVirt a través de la sesión del navegador de la víctima. El código JS se ha mantenido simple debido a la pris...

refreshing-soap-exploit

This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. The vulnerability The core vulnerability is a cross-site request forgery in F5 Big-IP's SOAP interface,...

CVE-2020-16898_Checker

CVE-2020-16898Checker Verificar todas las interfaces de red para la vulnerabilidad CVE-2020-16898 No hay parche ni solución alternativa, para esta verificación usa este enlace: https://github.com/CPO-EH/CVE-2020-16898Workaround/blob/main/VCE-2020-16898QuickWin.ps1...

CVE-2026-20079

🚨 CVE-2026-20079 "Critical Cisco FMC Zero-Day" Critical Authentication Bypass Leading to Root RCE in Cisco Secure Firewall Management Center 📋 Overview CVE-2026-20079 is a critical vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software. An unauthenticated remot...

CVE-2023-20198

Overview This repository contains a cybersecurity case study analysing CVE-2023-20198, a critical zero-day vulnerability in Cisco IOS XE Software. The project explores how the vulnerability can be exploited via the Web UI and proposes technical, procedural, and policy-based mitigation strategies...

CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

CVE-2023-0861-POC

Analyzing and Reproducing the Command Injection Vulnerability CVE-2023-0861 in NetModule Routers NetModule is an Original Equipment Manufacturer OEM of industrial grade routers that are commonly used in critical infrastructure and industrial control systems. On February 24th, 2023, ONEKEY, a...

BIT-RCLONE-2026-88044 rclone: RC per-server auth-proxy bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...

CVE-2025-45620

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

Kernelhub

Bienvenido a Kernelhub Prefacio La intención original de crear el proyecto es aprender, analizar e investigar las últimas vulnerabilidades del kernel sin necesidad de ver el sistema y el contenido relacionado. Este proyecto es una colección de exploits propietarios, excepto en caso de fallo de...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...