CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

Network-Filesystem-Forensics

Network and Filesystem Forensics Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd CVE-2001-0550...

NetScope

NetScope Offline-first network investigation and response platform for Windows. NetScope is a desktop application for security analysts, incident responders, and CTF players. It takes a packet capture .pcap / .pcapng or a live interface and turns it into a complete, evidence-backed investigation ...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application This repository contains a Go-based proof-of-concept scanner for CVE-2026-22557 targeting the UniFi Network Application. The tool performs a controlled and non-destructive scan against a set of common endpoints and traversal payloads...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML Takeover Oracle WebLogic Server SAML Authentication Vulnerability A technical analysis of CVE-2026-60206 affecting Oracle WebLogic Server. 📖 Overview CVE-2026-60206 is a Critical CVSS 9.9 vulnerability affecting Oracle WebLogic Server. According to Oracle, a...

CVE-2024-24919

CVE-2024-24919 I'm not responsible for anything : Instalation git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 FOFA Query title="Check Point SSL Network Extender"...

CVE-2025-0282-Full-version

Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...

bleeding_onions

BleedingOnions Tracking the Exit and Guard relays edges of the Tor network for CVE-2014-0160. https://encrypted.redteam.net/bleedingonions/ Special thanks to: Stem, a python controller library for Tor https://stem.torproject.org/. Steffen Ullrich's perl script to check for CVE-2014-0160...

CVE-2019-9053

CVE-2019-9053 Improved code of Daniele Scanu SQL Injection exploit Following changes applied: Added time control variable -t or --time that enables user to extend the timing of SQL injection useful if a network connection in between hosts is subject of delays with packet transmission Network...

USN-8851-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

CVE-2021-36630

CVE-2021-36630 The SmartZone series devices of Ruckus have security risks. After notifying the manufacturer, they actively organized technical personnel to conduct investigations. During this period, we also provided security suggestions and verification methods many times. On July 19, the compan...

CVE-2023-20887

CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST,...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://kushagraojha.medium.com/vmware-vrealize-network-insight-cve-2023-20887-193f3c3d30a0...

cve-2020-11060-poc

CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...

cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

CVE-2024-38063-POC

IPv6 Vulnerability Packet Sender for Memory Corruption CVE-2024-38063 This Python script is designed to send crafted packets to trigger potential memory corruption vulnerabilities CVE-2024-38063. It utilizes the Scapy library to create and send IPv6 packets, optionally using specified MAC...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

CVE-2022-21907

CVE-2022-21907 Description POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. This problem exists...