CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

cve-2024-6387_hassh

CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...

Krawl v2.4.0

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

mcpsnoop v0.22.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

asf__cxf_CVE-2016-6812_3-0-11

Welcome to Apache CXF! Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary...

BurpSuite-Team-Extension

BurpSuite-Team-Extension This Burpsuite plugin allows for multiple testers to share live/historical proxy requests, scope and repeater/intruder payloads with each other in real time allowing for truly collaborative web app testing. When connected to the Team Sever and in a Team Room all requests...

KeeFarceReborn

KeeFarce Reborn A standalone DLL that exports databases in cleartext once injected in the KeePass process. Heavily inspired by the great KeeFarce, KeeThief and KeePassHax projects. Yet another KeePass extraction tool, why ? A few years ago, @denandz released KeeFarce, the first offensive tool...

cyberchef-recipes

CyberChef is the self-purported 'Cyber Swiss-Army Knife' created by GCHQ. It's a fantastic tool for data transformation, extraction & manipulation in your web-browser. Full credit to @GCHQ for producing the tool. See: https://gchq.github.io/CyberChef/ General Tips Download CyberChef and run it...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

AdvSim.Cryptography

AdvSim.Cryptography The AdvSim.Cryptography NuGet contains a set of cryptographic wrapper functions which are reusable, configured with sane defaults and are easy to use. Further details are available under the different subheadings below. Symmetric Key Material Generation AES Triple DES RC4 RC2...

priority-intelligence-requirements-dev

Developing Priority Intelligence Requirements @ Red Hat v1.1 In the rapidly evolving landscape of cyber threat intelligence CTI, the formulation of Priority Intelligence Requirements PIRs stands as a crucial component of your CTI program and the planning and direction phase of the intelligence...

ENLBufferPwn

ENLBufferPwn CVE-2022-47949 CVE:| CVE-2022-47949 ---|--- CVSS v3.1:| 9.8/10 Critical Authors:| PabloMK7, Rambo6Glaz, Fishguy6564 Reported:| August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed:| December 22nd, 2022 Table of contents Description...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK Path Traversal Lab A small, reproducible Docker lab that contrasts the percent-encoded path traversal behavior in NLTK 3.9.4 with the corrected behavior in NLTK 3.10.0. The vulnerable version validates the resource name before URL decoding. The fixed payload...

Harden-Windows-Security HardenSystemSecurity-v1.0.88.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → no-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device 2026-08-12 firmware F9360ZCSAIZF1, kernel...

ssh-enum

ssh-enum Statistical Validation Study of CVE-2016-6210 A reproducible re-investigation of OpenSSH username enumeration using statistical analysis. This project re-investigates CVE-2016-6210 , a documented OpenSSH timing side-channel, to determine whether it remains observable on a modern Ubuntu...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...