duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Max

Maximizing BloodHound with a simple suite of tools Description New Release: dpat - The BloodHound Domain Password Audit Tool DPAT A simple suite of tools: get-info - Pull lists of information from the Neo4j database mark-owned - Mark a list of objects as Owned mark-hvt - Mark a list of objects...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...

CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Exploit: Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Table of Contents Installation Usage Installation Clone the...

pgm-attack

PGM-attack Overview Official code for our paper, Poisoning Attacks on the PGM-index. Quick Start 1. Clone and submodules git clone REPOSITORY LINK cd pgm-index-poisoning git submodule update --init --recursive 2. Build ./scripts/build.sh Requires CMake see Dependencies. Outputs go under build/...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a remote code execution caused by improper handling in Upload function and maxfilesize parameter in dashuploader components, letting remote attackers execute arbitrary code, exploit requires crafted request. id: CVE-2026-38361 info: name:...

ghostlock-myron-tw

GhostLock for POCO F8 Ultra / REDMI K90 Pro Max — Global & Taiwan Variant myron, WPMTWXM GhostLock CVE-2026-43499 kernel exploit port for the global/Taiwan firmware of the POCO F8 Ultra / REDMI K90 Pro Max codename myron, Snapdragon 8 Elite Gen 5 / SM8850. Target : HyperOS OS3.0.6.0.WPMTWXM —...

CVE-2022-0847

DirtyPipe Exploit for the DirtyPipe vulnerability written, and discovered by Max Kellermann - https://dirtypipe.cm4all.com/ POC...

DirtyPipe-BSI

Dirty...What? This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite the root password field in /etc/passwd and restore it after obtaining a root shell. Note: I claim no credit for finding this vulnerability or writing the proof of concept. This exploit is simply a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libsoup (UTSA-2026-147044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147044 advisory. A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlle...

Security Bulletin: IBM BigMemory Max is affected by bcprov-jdk18on that could allow attackers to execute a denial of service by exhausting system resources

Summary IBM BigMemory Max utilizes bcprov-jdk18on for TLS/SSL connections, digital signature generation/verification, file/data encryption, secure key storage PKCS12, PKCS8, and supporting modern cryptographic standards. Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for...

EUVD-2026-110472

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /bookflight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-116514

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /bookflight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the...