log4j-poc

log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description The demo Tomcat 8 server on port 8080 has a vulnerable app log4shell deployed on it and the server also vulnerable via user-agent attacks. The remote exploit app in this demo is based on that found at...

Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure

Akkadian Provisioning Manager 4.50.02 could allow viewing of sensitive information within the /pme subdirectories. id: CVE-2020-27361 info: name: Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure author: gy741 severity: high description: Akkadian Provisioning Manager 4.50.0...

reconswarm

ReconSwarm ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead. ReconSwarm is suitable for bug bounty hunters...

terraguard

About The Project This project's goal is to be simple to create and destroy your own VPN service using WireGuard. Prerequisites Terraform = 1.0.0 Ansible = 2.10.5 How to Deploy Terraform Run with sudo is necessary because we need permission on localhost to install packages, configure a network...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

foreman: foreman: API host template render discloses secrets to view_hosts users (incomplete CVE-2026-96659 fix)

A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...

foreman: foreman: API host template render discloses secrets to view_hosts users (incomplete CVE-2026-96659 fix)

A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...

foreman: foreman: API host template render discloses secrets to view_hosts users (incomplete CVE-2026-96659 fix)

A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...

Labtainers

Labtainers: A Docker-based cyber lab framework Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises...

tethr

Tethr Android Tethering Provisioning Check Bypass CVE-2017-0554 This is the repository for the proof of concept Tethr app which demonstrates CVE-2017-0554 to bypass the tether provisioning check on Android prior to version 7.1.2. Informational Blog Post Download Tethr Demo Video...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

victorian_machinery

Victorian Machinery Victorian Machinery is a proof of concept exploit for CVE-2022-30525. The vulnerability is an unauthenticated and remote command injection vulnerability affecting Zyxel firewall's that support zero touch provisioning. Zyxel pushed a fix for this issue on April 28, 2022. The...

offensive-docker-vps

Offensive Docker VPS Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets. 🎉🎉Digital Ocean Bonus 🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out! Table of...

CVE-2025-56015

CVE-2025-56015 GenieACS RCE Overview Proof-of-Concept exploit for CVE-2025-56015 a critical sandbox escape and code injection vulnerability in GenieACS allowing arbitrary JavaScript execution in the provisioning context. By leveraging the declare.constructor.constructor prototype chain, an attack...

android-workprofile-exploit

Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...

CVE-2026-68862

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

CVE-2026-68862

The Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection vulnerability in the SDC host provisioning component . A high-privileged remote attacker with access to the PowerFlex management plane could exploit this flaw to execute arbitrary OS commands on provisioned SDC hosts,...

CVE-2026-68862

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

EUVD-2026-123660

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

CVE-2025-1242

CVE-2025-1242: Exposure of Administrative IoT Hub Credentials Advisory Field| Value ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 Use of Hard-coded Credentials Researcher| Michael Groberman — Gr0m Published...