CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

openredirect

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install openredirect Run bellow command to check openredirect -h Configurations 2. We integrated with the Telegram API to receive insta...

CVE-2021-24917

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2021-24917 Run bellow command to check CVE-2021-24917 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2020-27838

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2009-0347

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2009-0347 Run bellow command to check CVE-2009-0347 -h Configurations 2. We integrated with the Telegram API to receive...

plausible-editor-invite

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · plausible-editor-invite plausible-editor-invite Plausible Analytics community edition, GitHub master d44e104ae3943a9240d5cb6b62e67dff0f069d3a 2026-10-16 - Plausible Insights OÜ Class: Privilege leftover invitation-tok...

scripthunter

scripthunter Scripthunter is a tool that finds javascript files for a given website. To scan Google, simply run ./scripthunter.sh https://google.com. Note that it may take a while, which is why scripthunter also implements a notification mechanism to inform you when a scan is finished via Telegra...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

bandexploit

Band Exploit CVE-2018-11631 A Simple Python script Using Gatttool to exploit an Insecure Bluetooth Low Energy Smart Watch M1 Band 1. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 Usage: bandexploit.py options Address Options: -h, --help show this help message and exit -s, --sms...

ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...

miteru

This repository does not have a README...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

CVE-2023-34840

CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...

CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

cloud-audit

Project Introduction cloud-audit Cloud Security Audit Assistant is a tool for detecting the exploitation of leaked AK/SK from public cloud vendors. It periodically calls cloud platform APIs to audit logs and identifies suspected intrusions based on abnormal behavior, black features, and baselines...

CVE-2026-94295

The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without any...

EUVD-2026-109341

The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing secret is configured, which is its default state, allowing unauthenticated attackers to forge a payment completion notification and create a completed order without paying...

ChangeTower

ChangeTower ChangeTower is intended to help you watch changes in web pages and get notified of any changes written in Go. This tool is good to know the web pages are updated something or not to work on the new site before others Installation Instructions ChangeTower requires go1.16+ to install...

zeekjs-notice-telegram

Zeek Notice Telegram ZeekJS edition This package re-implements zeek-notice-telegram in TypeScript ZeekJS to work around unreliability in ActiveHTTP. It borrows both Yacin's package above and the ZeekJS reimplementation of that package's original inspiration zeek-notice-slack which is now...