SUSE CVE-2026-98685

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifsremapfilerange discarded the pagecache only for the folios overlapping the destination region, so when a clone extends the file the folio straddlin...

CVE-2017-1000117-test

How it works This operates using the CVE-2017-1000117 vulnerability. When you clone this repository with root privileges using the git command with the --recurse option, an HTTP server that listens on port 12345 will run automatically. To stop the HTTP server, find its process ID and kill it...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...

SUSE CVE-2026-98802

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

log4shell-rmi-poc

log4shell-rmi-poc A Proof of Concept of the Log4j vulnerability CVE-2021-44228 over Java-RMI It uses Log4j 2.5.7 from spring-boot-starter-log4j2 Requirements: Tested with Java 8 JDK 1.8.025 and Java 11 JDK 11.0.1 How to run the POC 1. Clone the repo: git clone...

CVE-2024-27348

🔥 CVE-2024-27348 Exploitation Toolkit 🎓 Academic Project 📚 Course: FC411 - Secure Network Design 👨‍🏫 Instructor: Dr. Maira Sultan 🏫 University: University of Prince Mugrin 📅 Year: 2025 ⚡ A complete toolkit for exploiting CVE-2024-27348 Apache Huge-Graph-Server developed as part of the FC411 course...

Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

EVTX-ATTACK-SAMPLES

Windows EVTX Samples 200 EVTX examples: This is a container for windows events samples associated to specific attack and post-exploitation techniques. Can be useful for: Testing your detection scripts based on EVTX parsing Training on DFIR and threat hunting using event logs Designing detection u...

CVE-2023-4220

CVE-2023-4220 PoC Chamilo LMS Unauthenticated Big Upload File RCE This repository contains a Proof of Concept PoC for CVE-2023-4220 , a Remote Code Execution RCE vulnerability affecting Chamilo LMS. This vulnerability allows unauthenticated attackers to exploit a large file upload feature, leadin...

GHSA-C4QX-W738-7HR3 GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils npm, pkg:github/ardatan/graphql-tools | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath packages/utils/src/mergeIncrementalResult.ts | | Vulnerability...

GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils npm, pkg:github/ardatan/graphql-tools | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath packages/utils/src/mergeIncrementalResult.ts | | Vulnerability...

SUSE CVE-2026-114145

GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, createsubmodule in git/objects/submodule/base.py accepts an attacker-influenced submodule path such as .git/hooks and invokes clonerepo before safely rejecting the destination. In 3.1.x, validaterepopath does no...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ A powerful social engineering toolkit that automates phishing, OTP/email bombing, fake mail and more — built with ❤️ by @karthithehacker ⚠️ For educational use only. Do not use this tool against anyone without explicit permission. 📌 Features 🎯 Phishing Attacks – Simulate fake...

DVIA-v2

DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...

CVE-2017-7529

CVE-2017-7529 Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Installation $ git clone...

React2shell-ultimate-scanner

CVE-2025-55182 Advanced Scanner 🚀 A professional and automated security scanner to detect and validate CVE-2025-55182 , a critical vulnerability affecting Next.js React Server Components. Designed for security researchers, penetration testers, and bug bounty hunters who want fast, clean, and...

React2Shell-CVE-Lab

⚛️ React2Shell: CVE-2025-55182 Vulnerable Lab ⚠️ WARNING: INTENTIONALLY VULNERABLE APPLICATION This repository contains a Dockerized application specifically configured to be vulnerable to CVE-2025-55182 React2Shell. DO NOT deploy this container in a production environment or on a public server...

CVE-2025-24799

CVE-2025-24799 Auto Exploit ⚡ Overview CVE-2025-24799 is a proof-of-concept PoC exploit targeting GLPI. This exploit demonstrates unauthenticated SQL Injection time-based blind to extract user credentials. Disclaimer: This PoC is for educational purposes only. Do not use on systems without...

Total-Commander-FTP-Password-Recovery-Tool-Python

Total Commander FTP password recovery Python Total Commander formerly known as Windows Commander is a classic file manager for Windows, Windows CE, Windows Phone, and now also Android. Total Commander has a built-in FTP/FXP client and it keeps the FTP logins and encrypted passwords in wcxftp.ini...