EUVD-2026-104080

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083 sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

Cryptolocker

DISCLAIMER : OUR TOOLS ARE FOR EDUCATIONAL PURPOSES ONLY. DON'T USE THEM FOR ILLEGAL ACTIVITIES. YOU ARE THE ONLY RESPONSABLE FOR YOUR ACTIONS! OUR TOOLS ARE OPEN SOURCE WITH NO WARRANTY AND AS ARE. Cryptolocker Crypto is open source Crypto-Locker. Crypto is developed in Visual C++. It has featur...

CVE-2026-112083

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.sendweightstoremoteinstance of the file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py of the component Weight Exporter. Performing a manipulation of the argume...

CVE-2026-112083

A security flaw in sgl-project SGLang up to version 0.5.19 allows for a remote denial of service (DoS). The vulnerability exists in the Weight Exporter component, specifically within the WeightExporter.send_weights_to_remote_instance function located in the file python/sglang/srt/model_executor/m...

sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...

curl: SSH host-key policy is missing from the connection-reuse tuple: strict pins and knownhosts are silently skipped on reused SFTP/SCP connections

The core effect is a silent host-authentication bypass: a transfer whose configured SSH host-key policy would reject the server is served anyway, with exit code 0 and no warning, because it reuses a pooled connection established under a weaker or absent policy. curl may assess this lower because ...

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

PSAsyncShell

PSAsyncShell PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections. Additionally...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

YZMCMSxss

YZMCMSxss CVE-2018-8078 YZMCMS v3.7 latest version xss vulnerability YZMCMS V3.7 Stored XSS This xss exists in the newly added advertising management module in v3.7, as shown in the figure: This xss exists in v3.7 new advertising management module, as shown in the figure: We can find the specific...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...

POSTDump

POSTDump Another tool to perform minidump of LSASS process using few technics to avoid detection. POSTDump is the C / .NET implementation of the ReactOS minidump function like nanodump, thus avoiding call to the Windows API MiniDumpWriteDump function. The dump logic code is saved under the...

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

vi-bot

BotDetect v2 — Production Bot Detection Library Client-side bot and automation detection library with weighted scoring, behavioral analysis, browser fingerprinting, and configurable thresholds. Detects headless browsers, Selenium, Puppeteer, Playwright, CDP-based tools, and stealth automation...