Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619-POC Pre-RINIT session unserialize RCE in PHP...

CVE-2024-10924

CVE-2024-10924 - Authentication Bypass in Really Simple Security OVERVIEW This project demonstrates the exploitation and mitigation of CVE-2024-10924, a critical authentication bypass vulnerability in the WordPress "Really Simple Security" plugin. STEP 1: ENVIRONMENT SETUP Start the vulnerable...

php2shell-exploit

php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...

KLAIOS

🛡️ KLAIOS – System Manual v6.0 Name: KLAIOS Kali Linux AI Operations System Version: 6.0 Red Team Edition Status: Operational / Armed 1. What is KLAIOS? KLAIOS is a hybrid security environment. It combines the offensive power of Kali Linux with the security of a VPN bunker and the intelligence of...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

RedTeam-Tools

RedTeam-Tools This github repository contains a collection of 150+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. 🔗 If you...

CVE-2020-16152

CVE-2020-16152 Summary | ---|--- Product vendor| Aerohive Networks / Extreme Networks Product name| HiveOS / IQ Engine Product Version| Tested on 10.0r8a build-242466 and older The Aerohive/Extreme Networks HiveOS administrative webinterface NetConfig is vulnerable to LFI because it uses an old...

cve-2024-56800-poc

cve-2024-56800 POC Reference https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 Vulnerability Firecrawl is a web scraper that allows...

cisagov__check-cve-2019-19781.4142e02b

check-cve-2019-19781 🔎🐞 This utility determines if a host appears susceptible to CVE-2019-19781. Requirements Python versions 3.6 and above. Note that Python 2 is not supported. Installation From a release: pip install...

nextpnr

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-59296 DESCRIPTION: Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose...

EUVD-2026-108112

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

Scannerweb

Scannerweb Vulnerability Scanner written in python3, It Fuzzes All URLs of target website & then scan them for scanner web Screeenshot Navigate to the /opt directory optional cd /opt/ Clone this repository git clone https://github.com/Khalidhusain786/Scannerweb.git Navigate to scannerweb folder c...

PacketSender

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

DNSExfiltrator

DNSExfiltrator Author: Arno0x0x - @Arno0x0x DNSExfiltrator allows for transfering exfiltrate a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. DNSExfiltrator has two sides: 1. The server side , coming as a singl...

ghidra-mcp

Ghidra MCP Server If you find this useful, please ⭐ star the repo — it helps others discover it! If Ghidra MCP saves you time, consider sponsoring the project. One-time and recurring support both help fund compatibility updates, production hardening, docs, and new tooling. A production-ready Mode...

gowitness

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...