CVE-2019-5420

CVE-2019-5420 Exploit for Rails CVE-2019-5420 The issue Until Rails v5.2.2, when secure the sessions in development mode, the application derives the key from the name of the application...

CVE-2022-23614

CVE-2022-23614 Proof of concept PoC for CVE-2022-23614 referenced in the DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explanation Twig is a flexible, fast, and secure template engine for PHP. Notably, it is possible to use filters in a template before rendering it. The sort filter can be used to sor...

CVE-2025-59057-PoC

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag...

CVE-2024-27914

CVE-2024-27914: Reflected XSS in debug mode of GLPI An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. Package - GLPI...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

CVE-2026-103421

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI path segment after /androidjson/search/' parameter in all versions up to, and including, 11.84 due to insufficient input sanitization and output escaping. This make...

CVE-2026-103421 WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI path segment after /androidjson/search/' parameter in all versions up to, and including, 11.84 due to insufficient input sanitization and output escaping. This make...

EUVD-2026-91951

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI path segment after /androidjson/search/' parameter in all versions up to, and including, 11.84 due to insufficient input sanitization and output escaping. This make...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Эксплуатация System Management Mode с помощью очень очень очень очень очень очень очень длинного прерывания. Обзор Оказывается, можно сломать SMM — безопасную, привилегированную среду выполнения, работающую незаметно в фоне каждого x86 CPU — с помощью всего лишь одной неприличн...

DMA-ProcessDumper

DMA-ProcessDumper Сбрасывает всю память целевого процесса в пользовательском режиме с использованием DMA через MemProcFS на устройстве PCIe FPGA Сборка Скопируйте leechcore.h, vmmdll.h и vmm.lib из MemProcFS в каталог DMA-ProcessDumper Скомпилируйте с помощью Visual Studio Скопируйте leechcore.dl...

OpenSSH-4.7p1-CVE-2008-5161-Exploit

CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 Debian-8ubuntu1 targets by driving Metasploit’s auxiliary/scanner/ssh/sshlogin module from Python via pwntools. This project is intended for research and authorized security testing...

Driver-kaldereta

Kaldereta Неподписанный драйвер режима ядра, выполняющий модификации памяти Возможности получение идентификатора процесса получение базового адреса образа изменение защиты области памяти выделение области памяти освобождение памяти чтение/запись по адресу чтение/запись по адресу со смещением чтен...

Bin-Finder

Description This tool looks for either the processes that have a certain binary loaded or the processes that don't. This is useful in the following scenarios: It allows to detect processes where an specific EDR/AV dll is not loaded. This could lead to EDR's exception detection. It allows to obtai...

auto-repeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

EATGuard

EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...

Kernel-Process-Hollowing

Windows Kernel Mode Process Hollowing This project is a proof of concept of how the Process Hollowing technique works from the kernel level. Resources SSDT Hook Process Hollowing...

SAFE

SAFE SAFE выполняет контролируемую, учитывающую особенности репозитория оценку безопасности результатов Semgrep и Trivy в исследовательских артефактах. Он поддерживает две независимые задачи классификации: прямое бинарное предсказание SECURITYRELEVANT или NONSECURITY и детальную мультиклассовую...

CVE-2026-94544

A flaw was found in Next.js. Pending cache operations do not properly separate Draft Mode requests from standard requests when fulfilling matching cache keys. Under concurrent request conditions, an unauthenticated user can receive unpublished draft content generated during an editor's session. I...

HashcatRosetta

| | | | | | | || \ | || | | || |/ / | ' \ / / | | | / / |/ \ | / | | | | \ \ | | | | | | || \ \ / || || | | || ||,|/| ||\,||| \/|/||\,| Расшифруйте Розеттский камень правил взлома паролей HashcatRosetta Проект на Python, предназначенный для анализа выходных файлов hashcat в режимах отладки...