cve-2025-29927

CVE-2025-29927 CVE-2025-29927 Vulnerability All versions of Next.js from 11.1.4 through 13.5.6, 14.x before 14.2.25, and 15.x before 15.2.3 are affected by this vulnerability. The impact is particularly significant for applications that rely on middleware for implementing access controls, as...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...

sipcheck

SIPCheck v.3.0 Introduction SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user or bot try to register o make calls using wrong passwords. Unlike Fail2Ban, SIPCheck manage, not just the attacker, also the clients that you have trust so if you...

RustScan

➡️ Discord | Installation Guide | Usage Guide ⬅️ Fast, smart, effective. 🤔 What is this? The Modern Port Scanner. Find ports quickly 3 seconds at its fastest. Run scripts through our scripting engine Python, Lua, Shell supported. 🛠️ Installation You can install RustScan's binary from our releases...

gha-lab-a5c1876997-1

This project is backed by KanaDojo かな道場 An aesthetic, minimalist, and highly customizable platform for mastering Japanese, inspired by Duolingo and Monkeytype. Built with Next.js and sponsored by Vercel...

vaas-cve-2014-6271

서비스로서의 취약점 - CVE 2014-6271 취약한 버전의 bash와 CVS-2014-6271일명 Shellshock을 시연하는 웹 애플리케이션이 포함된 Debian Buster Linux 시스템입니다. 개요 이 도커 컨테이너는 Debian Buster 기반이며, 취약한 버전의 Bashbash4.2:2b:dfsg-0.1를 사용하도록 수정되었습니다. 웹 애플리케이션은 Apache 2를 통해 제공되며, 셸 명령어를 실행하는 CGI 스크립트를 서빙합니다. 사용법 다음 명령어로 컨테이너를 설치합니다: docker pull...

vaas-cve-2014-6271

Vulnerability as a Service - CVE 2014-6271 A Debian Buster Linux system with a vulnerable version of bash and a web application to showcase CVS-2014-6271, a.k.a. Shellshock. Overview This docker container is based on Debian Buster and has been modified to use a vulernable version of Bash...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...

SpringFramework_CVE-2022-22965_RCE

SpringFrameworkCVE-2022-22965RCE SpringFramework Remote Code Execution Vulnerability CVE-2022-22965 Vulnerability Reproduction Environment root@kitploit: docker pull vulfocus/spring-core-rce-2022-03-29 docker run -d -p 8090:8080 --name springrce -it vulfocus/spring-core-rce-2022-03-29 Write...

NotCVE-2026-0010

Summary Vulnerability: Unauthenticated IPC Local Privilege Escalation to SYSTEM via Barrier Daemon TCP Port 24801 Vendor: debauchee Barrier project Product: Barrier 2.4.0 final release, 2021-11-01 CWE: CWE-306: Missing Authentication for Critical Function Description Barrier's Windows service...

vuln-bank-mobile

💳 Vulnerable Bank 모바일 앱 Vulnerable Bank 는 보안 엔지니어, 침투 테스터, 모바일 앱 보안 학습자를 위해 제작된 의도적으로 취약한 모바일 애플리케이션으로, 안전하지 않은 코딩 관행의 실제 공격을 연습하고 시연할 수 있도록 설계되었습니다. 이 모바일 앱은 일반적인 은행 기능을 갖춘 의도적으로 취약한 웹 API인 Vulnerable Bank API의 프론트엔드 역할을 합니다. 📥 즉시 다운로드 및 실행 권장 🆕 이제 컴파일된 .apk를 GitHub Releases에서 직접 다운로드할 수 있습니다. 📦...

EUVD-2026-68402

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating them into HTML via innerHTML. Attackers can supply malicious templates with crafted option values containing HTML and JavaScript to execu...

CVE-2026-82867 @pdfme/schemas before 5.5.9 Cross-Site Scripting via Select

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating them into HTML via innerHTML. Attackers can supply malicious templates with crafted option values containing HTML and JavaScript to execu...

CVE-2026-82867

@pdfme/schemas versions before 5.5.9 contain a cross-site scripting (XSS) vulnerability in the Select schema plugin . The root cause is the failure to sanitize option values before interpolating them into HTML via innerHTML. An attacker who can supply a malicious template with crafted option valu...

CVE-2026-82862

Hulumi versions prior to v1.3.2 are affected by a helper script shadowing vulnerability in which the threat-model helper script is resolved from an unsafe root . An attacker can place a malicious file in the workspace directory, causing it to be loaded in place of the intended helper script, resu...

CVE-2023-32233

Сборка и настройка Инструкции ниже были протестированы на Ubuntu 23.04 Lunar Lobster. Установка зависимостей сборки Выполните следующую команду для установки зависимостей сборки: root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev Сборка бинарного файла Выполните следующую команду для...

EUVD-2026-68450

Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...

CVE-2026-82862 Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files

Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution...

Heartexploit

Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....

lbmap

Proof of concept scripts for advanced HTTP fingerprinting, presented at OWASP AppSecAsia 2012. These scripts should be considered a PoC or alpha quality. Suggestions, recommendations, signatures, pathces and flames are welcome via http://www.github.com/wireghoul/lbmap. The following tools are...