CVE-2022-41220

Description of CVE-2022-41220 md2roff 1.9 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, download a vulnerable version of md2roff version 1.9: git clone...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

cve-2021-4034

CVE-2021-4034 - PwnKit Polkit Local Privilege Escalation Overview This repository contains a Proof of Concept for CVE-2021-4034 , also known as PwnKit. It was developed for personal training and educational purposes only. Use only in environments you own or are explicitly authorized to test...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

CVE-2024-29050

CVE-2024-29050 CVE-2024-29050 is a security vulnerability in Windows' cryptographic services, particularly in how certificates are processed during cryptographic operations. The issue stems from an integer overflow, which occurs when calculations on data like file sizes or buffer lengths exceed t...

CVE-2026-101032

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Cross-Site Scripting via /client/manage/ourphpout.php Products Affected By CVE-2023-30212 : Vendor| Product| Version ---|---|--- ourphp| ourphp| 7.2.0 Docker Installation Guide : To install OURPHP alertxss" Steps to Reproduce the issue: After completing the setup of the docke...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

WPS-CVE-2022-24934

STAND WITH UKARINE Putin IS CRIMINAL! Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send...

gv_decryptor

Gallery Vault Decryptor Recovery tool for assets encrypted by the Gallery Vault ThinkYeah Android application. It supports the V2 container layout documented below and does not require the Gallery Vault PIN. Only recover data that you own or are authorized to examine. Requirements Python 3.10 or...

CVE-2020-8816

Notes to defend against this exploit Patching Just do it... now. Subscribe to/watch the Pi-hole repository for new releases and Issues and Pull requests if you're serious. Network Do not expose Pi-hole to the internet. Only expose Pi-hole DNS port 53 to DNS clients, not other ports like managemen...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-101032

The navi tool (versions through 2.24.0 ) is vulnerable to OS Command Injection due to a failure to properly escape cheatsheet variable values during shell command substitution. An attacker can achieve arbitrary command execution with victim privileges by injecting shell metacharacters through cra...

EUVD-2026-87945

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-49049

CVE-2026-49049 Mass Scanner Mass vulnerability scanner for CVE-2026-49049 - Unauthenticated Remote Code Execution in Joomla Helix3 Framework. 📌 Description This tool checks multiple Joomla sites for the CVE-2026-49049 vulnerability found in the Helix3 plugin. The vulnerability allows an...

dns-zone-transfer-test

DNS Zone Transfer Test Automates Domain Name System DNS zone transfer testing. Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output. Usage dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1...

Exploit for CVE-2026-87902

CVE-2026-87902 — WordPress Core Unauthenticated Local File Inc...

D-Scan

When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse D-SCAN es un marco de análisis para detectar ataques de envenenamiento de documentos en sistemas RAG Retrieval-Augmented Generation. Recopila estados internos del LLM durante la generación probabilidades de tokens y...