142064 matches found
sunsetscan
SunsetScan Network security auditing for humans โ powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...
CVE-2023-30990
CVE-2023-30990 exploits See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ The Python scripts require the ebcdic module: pip install ebcdic DRDA S38CMD method root@kitploit: python3 ddm.py "" DRDA SQL method root@kitploit: python3...
CVE-2023-2640-CVE-2023-32629-Interactive-PoC
CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ashadmin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead components AshAdmin.Components.Resource.RelationshipField and AshAdmin.Components.Resource.ManagedRelationshipSelectField...
ESAPI-SQLinjection-CVE-2025-5878-Exploit
Affected: ESAPI.encoder.encodeForSQL method and OracleCodec class Affected versions: 2.2.0.0-2.6.2.0 Usage: similar to sqlmap usage: esapi-sqlinjection.py -h -u URL -c COOKIE --dbs --tables --columns -D DB -T TABLE -C COLUMN --dump esapi-sqlinjection.py: error: the following arguments are require...
Exponentiated-Gradient-Descent-LLM-Attack
Change Readme File. This is a Project that explores the Exponentiated Gradient Descent optimizaiton method to produce adversarial suffix to attack algined Large Language Models. The method is shown to be effective on Llama-2 chat model with 7 Billion parameters. To run pgd script on a number of...
CVE-2025-26465
CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...
CVE-2025-46080
BUGAuthor: yggcwhat Affected version: Huocms Vendor: https://huocms.com/ Source Code Address: https://gitee.com/digital-flag/huocms Vulnerability File: AttachmentController.php Affected Version๏ผ HuoCMS - controller -backend - AttachmentController.php:editFileUrl The suffix of $newPathUrl in the...
CVE-2021-43798
CVE-2021-43798 1. Summary Grafana is an open-source platform that supports data monitoring and management. In the versions listed below, a Path Traversal vulnerability exists that allows manipulation of file paths using special characters such as ../. 8.0.0 and above, below 8.0.7 8.1.0 and above,...
CVE-2025-47827
CVE-2025-47827 Prueba de concepto e informe de vulnerabilidad para CVE-2025-47827. Contenido Descripciรณn Divulgaciรณn Impacto Detecciรณn Mitigaciรณn Binarios Prueba de concepto Recursos Descripciรณn En IGEL OS anterior a v11, Secure Boot puede ser eludido porque el mรณdulo igel-flash-driver verifica...
dns-rebind-toolkit
DNS Rebind Toolkit Demo | Aviso de seguridad | Payloads incluidos | Preguntas frecuentes DESCARGO DE RESPONSABILIDAD: Este software es solo con fines educativos. Este software no debe utilizarse para actividades ilegales. El autor no es responsable de su uso. No seas un imbรฉcil. DNS Rebind Toolki...
CVE-2026-5118
๐ฅ CVE-2026-5118 Divi Form Builder Un campo oculto. Un valor modificado. Acceso completo a todo el sitio web. ๐งจ ยฟQuรฉ puede hacer el atacante? ๐ฌ Anรกlisis de Vulnerabilidad Ubicaciรณn de la Vulnerabilidad root@kitploit: includes/shared/handlers/FormSubmissionHandler.php โ createuser Cรณdigo Vulnerable...
CVE-2025-49113
CVE-2025-49113 Detection NOTE This template has now been implemented into CERT Polska's tool Artemis. Iโm deeply honoured to be acknowledged by CERT Polska for this vulnerability detection script. It is a true privilege to play a part in strengthening global cyber security efforts through...
CVE-2026-35204
CVE-2026-35204 This repository represents a PoC to a CVE-2026-35204 Description "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem...
CVE-2026-49049
CVE-2026-49049 Vulnerability Analysis: Unauthenticated Arbitrary File Write in JoomShaper Helix3 Joomla This repository contains materials, technical analysis, and a Proof of Concept PoC for the critical vulnerability CVE-2026-49049 found in the outdated template framework Helix3 by JoomShaper fo...
gha-lab-a815a82f03-1
CloudPirates Open Source Helm Charts A curated collection of production-ready Helm charts for open-source cloud-native applications. This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices. โ ๏ธ IMPORTANT : As of April 15, 2026 , all...
NotCVE-2026-0009
Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...
CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-
Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...
csf
ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...
pbck-exploit
Mass Exploitation & Validation Framework for Joomla Page Builder CK Unauthenticated Arbitrary File Upload โ Remote Code Execution ๐ Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigatio...