CVE-2026-108258 Shiny for Python - Path traversal in bookmark restore

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

EUVD-2026-95986

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

CVE-2026-108258

Shiny for Python versions 1.4.0 through 1.6.4 are vulnerable to a path traversal flaw in the bookmark restore functionality. The application fails to validate that the client-supplied state_id is a single safe path segment before joining it with the server-side shiny_bookmarks directory. This all...

CVE-2026-108258 Shiny for Python - Path traversal in bookmark restore

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

ps5-pihost

PS5 Pi Host Use Raspberry Pi OS Lite 64-bit, Bookworm or newer with NetworkManager. A 64 GB SD card has ample room. This runs the existing Python host; do not flash the ESP32 binary to the Pi or its SD card. What this does The Pi creates a Wi-Fi network for the PS5. Its DHCP server assigns the...

motioneye-authenticated-RCE

RCE autenticado en MotionEye/MotionEyeOS Un script de Python 3 que sube un archivo tasks.pickle que permite RCE en MotionEye. Necesitas credenciales de administrador, así que no debería ser un gran problema. Desafortunadamente, MotionEye/MotionEyeOS se puede encontrar frecuentemente ejecutándose...

CVE-2014-0160-HeartBleed

This is the exploit for CVE-2014-0160 from exploitdb. It did not work for me on python3 while solving Valentine on hackthebox, so I have made the necessary changes. I am not the original author of this code...

creepy-plugins

creepy-plugins Descrizione Plugin per cree.py L'architettura di cree.py consente di utilizzare più sorgenti definite dall'utente per le informazioni di geolocalizzazione. Queste sorgenti sono definite come plugin e possono essere installate in creepy copiandole nella cartella plugins sotto la...

CVE-2025-55182

RSC Detector - React Server Components Vulnerability Scanner A Python-based security scanner for detecting and exploiting React Server Components RSC vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing. ⚠️ WARNING : Thi...

CVE-2022-22965

CVE-2022-22965 Exploit Of Spring4Shell! Usages python3 exploit.py Target Host...

AgentTesla-Config-Extractor

AgentTesla-Config-Extractor Config extractor for AgentTesla - Discord/Telegram Variant Usage agenttesla-config-extractor.py -f Example Output Example Hashes 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9 118a34bf096f5b9ea16c31de288793192ed4bc413ee8f50198eb7df7f5cf8f0e...

CVE-2022-29464

CVE-2022-29464 LOADER Install and execute the app on the server user@domain: pip3 install colored user@domain: git clone https://github.com/sh4den/CVE-2022-29464-loader.git user@domain: cd ./CVE-2022-29464-loader/ user@domain: python3 main.py Disclamer This repository is for academic purposes, th...

CVE-2026-20685

CVE-2026-20685 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2026-51990

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

usbkill

« usbkill » è un kill-switch anti-forense che attende un cambiamento sulle porte USB e poi spegne immediatamente il computer. Per eseguirlo: sudo python usbkill.py oppure sudo python3 usbkill.py Progetto correlato; stessa idea, ma implementata come driver Linux:...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

linux-explorer

¡Este proyecto ya no recibe mantenimiento! Linux Expl0rer Caja de herramientas de análisis forense en vivo fácil de usar para endpoints Linux, escrita en Python y Flask. Capacidades ps Ver lista completa de procesos Inspeccionar el mapa de memoria del proceso y obtener cadenas de memoria fácilmen...

arp-dns-spoof

Installationon Debian-based Linux Distribution Install Scapy % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy Install python-NetfilterQueue % sudo apt-get install build-essential python-dev libnetfilter-queue-dev % git clone...

gha-lab-ba981941f0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of dedupeio/dedupe at commit...

XXERipper

XXERipper A standalone, black-box XML External Entity XXE scanner for security professionals. XXERipper detects in-band, error-based, and blind out-of-band XXE across 30+ attack technique families. It combines statistical baselining, differential parser fingerprinting, out-of-band confirmation vi...