33 matches found
CVE-2026-74889
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889
The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...
Exploit for CVE-2026-64638
đ @Mr-LeonardoGomes đ XSS2Shell-CVE-2026-64638...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
đ HTTP/2 Multi-Server HPACK Exhaustion
This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 â WHM/cPanel Kimlik DoÄrulama Atlama AraĹtÄąrma...
Malicious code in mbt (npm)
Supply chain compromise of legitimate SAP packages published by threat actor "[email protected]" impersonating SAP toolchain maintainers. All four compromised packages share the same fingerprint: setup.mjs 4.4 KB and execution.js 11.1 MB bundled in the tarball, with a preinstall hook of "node...
AARTF---Autonomous-AI-RedTeam-Framework
AARTF AI-Driven Autonomous Security Workflow !CIhttps:/...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Scanner !Licensehttps://img.sh...
pgAdmin 4 MultiâTarget Vulnerability Scanner
This project is a PHPâbased multiâtarget vulnerability scanner designed to identify potential exposure to CVEâ2025â13780 affecting pgAdmin 4 versions 8.14 and below. The tool operates as a heuristic / threatâintelligence scanner, not an exploit...
Exploit for CVE-2026-24061
CVE-2026-24061 Vulnerability Detection and Exploitation Tool...
Exploit for CVE-2020-1938
Ghostcat Scanner - CVE-2020-1938 A powerful Python exploit to...
MTAttack: Multi-Target Backdoor Attacks against Large Vision-Language Models
Recent advances in Large Visual Language Models LVLMs have demonstrated impressive performance across various vision-language tasks by leveraging large-scale image-text pretraining and instruction tuning. However, the security vulnerabilities of LVLMs have become increasingly concerning,...
Xmlrpc-scanner
QMLRPC Vulnerability Scanner đ Windows-compatible advanced QM...
Exploit for CVE-2017-0143
đŹ READMEä¸ć ⢠Compile/Install/Run ⢠Parameter Description ⢠How to use ⢠Scenario ⢠POC List ⢠Custom Scan ⢠Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligentăre...
Pocsuite
This project is an open-sourced remote vulnerability testing and proof-of-concept development framework called Pocsuite, developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine and many niche features for penetration testers and security researchers. The framework...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813 Exploit Toolkit This is an advanced and automa...