dameflare

DameFlare Unauthenticated RCE via Smart Card Authentication Bypass in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 Original research and POC: Tenable, Inc. TRA-2019-43 Python 3 tool: David Boyd @Fir3d0g How It Works Dameware MRC exposes a remote control service DWRCS.exe o...

sysreptor

An easy and customizable pentest reporting platform designed to simplify pentest report creation for security professionals. The FFG is the central national funding organization and strengthens Austria's innovative power. This project is funded by the FFG...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...

CVE-2024-42849

CVE-2024-42849 An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function. Writeup If the password change request is intercepted and a sufficiently long1MB string is supplied as the password to use, system resources will be...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint...

claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...

MaFrida

MaFrida A simple yet powerful Magisk module that automates starting the Frida server on boot and provides a convenient command-line interface to manage different Frida versions on Android. Features Automatically starts frida-server at boot. Easily switch between different Frida versions...

yaraQA

yaraQA YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are...

van-gonography

Hide any type of files inside a image of your choice Table of Contents Features How it works Installation Usage License Contributing File to hide| Cover image| Cover with file hidden ---|---|--- | Features File Hiding: Hide any type of file within an image of your choice, without altering the...

headscale

An open source, self-hosted implementation of the Tailscale control server. Join our Discord server for a chat. Note: Always select the same GitHub tag as the released version you use to ensure you have the correct example configuration. The main branch might contain unreleased changes. The...

Vulnerability-Playground-CVE-2025-61922

Vulnerability-Playground-CVE-2025-61922 This playground simulates the Customer Checkout vulnerability in PrestaShop...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Bypass bludit mitigation login and upload malicious to call a rev shell...

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

CVE-2025-65964

n8n Git Hooks CTF Demo ⚠️ This repository is for educational and CTF demonstration purposes only. Scenario An automation platform e.g., n8n uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config. An attacker-controlled workflow sets: root@kitploit...

CVE-2021-23383

CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source...

XSS-Scanner

XSS Scanner Cross-Site Scripting XSS is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS...

Important: Red Hat Security Advisory: redis:6 security update

An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...