Real Estate

Open Arsenal Real Estate Specifications The real estate ecosystem is built around the idea of shifting property intelligence away from centralized listing platforms and into locally hosted, self-sovereign data environments. Instead of relying on third-party platforms to define, store, or interpre...

CVE-2026-47883

CVE-2026-47883: Spring Framework UrlHandlerFilter Open Redirect PoC This repository is a minimal reproduction PoC for CVE-2026-47883, published as an official Spring security advisory. Official advisory: https://spring.io/security/cve-2026-47883/ Official title: Spring Framework Open Redirect in...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2026-48356

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 — Adobe Adobe Commerce подвержен уязвимости неограниченной загрузки файлов опасного типа, которая может привести к выполнению произвольного кода в контексте текущего пользователя. |...

invesalius3_vulnerabilities

invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or TMP-N if no ID...

cve-2026-46391

CVE-2026-46391 - Credential Exposure via SSRF in @haxtheweb/open-apis Proof of concept for CVE-2026-46391. Triggers the SSRF vulnerability in the cacheAddress endpoint of @haxtheweb/open-apis and captures the service account credentials sent in the callback. Build go build -o cve-2026-46391 . Tes...

CVE-Disclosures

Security Research & CVE Disclosures🔥 A repository documenting security vulnerabilities discovered in Free and Open Source Software FOSS by VETTRIVEL U There are only two types of companies: those that have been breached and know it, and those that have been breached and don’t know it yet. – ed...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Linux Kernel Open vSwitch Memory Corruption 🩸 Vulnerability Overview CVE-2026-64531 is a security vulnerability affecting the Linux Kernel Open vSwitch OVS networking subsystem. The flaw exists in the handling of Netlink nested attributes , where oversized action...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

IsildursBane

This repository does not have a README...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2 Working exploit for Open Web Analytics 1.7.3 - RCE enhenced with pentestmonkey's php reverse shell, Fixed issue of not able to find user in cache. Original soruce exploit can be found on here Usage Add your attacker...

ovswrap

OVSwrap — Linux kernel Open vSwitch datapath overflow tracking site Source for the OVSwrap patch-status tracker: a single-page site recording which distributions have shipped a fix for the Open vSwitch datapath overflow in the Linux kernel. Where the facts live Everything about the bug — CVE IDs,...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Открытое перенаправление во время OAuth-потока CVE-2024-35133 Содержание 1. Обзор 2. Подробное описание 3. Доказательство концепции 4. Решение 5. График раскрытия 6. Ссылки 7. Авторы 8. Правовые уведомления Обзор Revision : 1.0 Воздействие : Убедив жертву посетить...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

privacytools.io

Encryption Against Global Mass Surveillance. Contributing This project is archived. See our Welcome to Privacy Guides post for more information. Our project has now moved on to Privacy Guides. It's important for a website on privacy to be up-to-date. Keep an eye on software updates of the...

CVE-2023-33405

CVE-2023-33405 Open Redirection vulnerability identified on BlogEngine.NET CMS version 3.3.8.0 and earlier If a GET request to default.aspx page contains "years=" within the URL, the application calls a function named "Redirect". This function sets several parameters including year, month, date,...

OVSwrap-CVE-2026-64531-Mitigation-Tool

OVSwrap CVE-2026-64531 Mitigation Tool A simple script that detects and mitigates the OVSwrap vulnerability affecting Open vSwitch kernel modules. Features Detects vulnerable Open vSwitch modules Determines whether the module is loaded Blocks automatic loading Removes the module safely Verifies...