EUVD-2026-69829

Baserow 2.3.3 contains a SQL injection vulnerability in the index formula function. A low-privileged authenticated user who can create or modify formula fields can provide an undocumented fourth argument that is treated as a SQL template and interpolated directly into a PostgreSQL expression. The...

CVE-2023-20198-Scanner

Guide d'utilisation du scanner de périphériques Cisco IOS XE pour CVE-2023-20198-Scanner Ceci est un scanner d'empreintes de webshell conçu pour identifier les implants sur les WebUI Cisco IOS XE affectées par CVE-2023-20198 et CVE-2023-20273. Ce script Python vérifie la présence de périphériques...

Lockdoor-Framework

Lockdoor v2.3 ⚠️ This project is not maintained anymore. ⚠️ Find more at https://g.co/kgs/TtYRJJP Table of contents Table of contents Changelog 📌 : Badges 📌 : Support me 💰 : Contributors ⭐ : Versions 06/2021 : 2.3 03/2020 : 2.2.3 Blogs & Articles 📰 : Overview 📙 : Features 📙 : Pentesting Tools...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

droidcarve

DroidCarve DroidCarve is capable of analyzing an Android APK file and automate certain reverse engineering tasks. This repository contains the server and client component. The Frontend The frontend is a React application, which you can find in the client/ subfolder. The Backend The backend is a...

gitlab-profile

TEST STATUS : ↳ core-orchestrator tester ↳ documentation tester CREATION DATE: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ This project is in beta! 🎉 yeah! We're happy to announce that the beta version will soon be complete! From the version 0.153 is currently started all...

CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

Бюллетень безопасности: недостаточные средства контроля доступа позволяют неавторизованно скачивать файлы Let's Chat Назначенный CVE ID: CVE-2026-66750 Краткое описание GET /files/:id/:name проверяет, что вызывающий пользователь выполнил вход, и затем отдаёт файл. Он никогда не проверяет, разреше...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

Burp-Encode-IP

About This extension will encode an IP address into a bunch of less known encoding techniques. This technique is focused on testing vulnerabilities such as SSRF Server-Side Request Forgery, Open Redirect or RFI Remote File Inclusion. TL;DR Easy Install If you have Burp Pro it is possible to insta...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...

PoC-CVE-2026-33017

CVE-2026-33017: Unauthenticated RCE in Langflow = 1.8.2 Description A critical code injection vulnerability exists in Langflow that allows an unauthenticated remote attacker to execute arbitrary Python code on the server. The vulnerability resides in the POST /api/v1/buildpublictmp/flowid/flow...

CVE-2026-84442

A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component com.mapquest.android.ace. The manipulation leads to path traversal. An attack has to be approached locally...

DEBIAN-CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

AZL-98441 CVE-2026-14957 affecting package libreswan 4.15-2

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14982

The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server,...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

chlonium

Chlonium Chlonium est une application conçue pour cloner les cookies Chromium. Depuis Chromium 80 et versions ultérieures, les cookies sont chiffrés à l'aide d'AES-256 GCM, avec une clé d'état qui est stockée dans le fichier Local State. Cette clé d'état est chiffrée à l'aide de DPAPI. Il s'agit...

CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - Inyección SQL reescrito para python3, CVE-2019-9053 Me resultó problemático ejecutar este exploit en kali linux, ya que python2 no tiene termcolor, así que con muy pocos cambios lo hice funcionar con python3. Todo el crédito va para:...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Мы требуем безопасного возвращения всех граждан, взятых в заложники террористической группировкой ХАМАС. Мы не успокоимся, пока каждый заложник не будет освобождён и не вернётся домой в безопасности. Вы можете помочь вернуть их...