PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…...

CVE-2017-16995

CVE-2017-16995 A record of my own tinkering with the CVE-2017-16995 vulnerability and related analysis Hopefully I can find one myself, lol Overview This vulnerability is an LPE caused by an error in the verifier's branch judgment during BPF virtual execution In essence, it is an integer extensio...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject A self-contained, containerised lab that reproduces Apache log4j2 issue4255 end-to-end against the official Log4j 2.26.1 artifacts on JDK 17 , with positive controls, a hardened oracle, and a validated...

CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Container Volume Mount Diff-based discovery → Silent patch → Sandbox escape → Full /tmp disclosure Property| Value ---|--- Name| OpenLearnX-RCE CVE| CVE-2026-41900 GHSA| GHSA-8h25-q488-4hxw Type| Unauthenticated Info Disclosure / RCE Affected|...

Elite

Deprecated Temporarily The parent Covenant project no longer requires a client-side application. Elite has temporarily been deprecated. Please instead use the web interface included with the Covenant project. Elite may eventually be brought up-to-date with the Covenant project as an alternative...

vBulletin-5.x-0day-pre-auth-RCE-exploit

vBulletin-5.x-0day-pre-auth-RCE-exploit 影响版本：vBulletin 5.0.05.5.4 poc如下: !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if...

Mega-Bot

Mega Bot ☣ Scanner & Auto Exploiter What's Mega Bot ? from MegaBot import print """ Tool Scanner Tool Auto Exploiter """ About Mega Bot from MegaBot import print """ +----------------------------------+----------------------------------+ 1 X4PriV8 V1 | 22 XAttacker 2.5 official 2 AUto FixerFor...

yaml2yara

Introduction Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by David Cannings @edeca [email protected] http://www.github.com/nccgroup/yaml2yara This project is released under the AGPL license. Please see LICENSE for more information. Overview This repository...

openSSL_1.0.1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

agentbox

🛡️ AgentBox The open-source sandboxed runtime for AI agents Run AI agents with confidence. Every agent gets its own permission scope, credential vault, audit trail, and kill switch. Why AgentBox exists On January 27, 2026, CVE-2026-25253 became the first CVE ever assigned to an agentic AI system. ...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - Functional PoC MongoDB Memory Leak Exploitation - Simulated R6 Attack Complete Proof of Concept for CVE-2025-14847 MongoBleed Tested: ✅ MongoDB 7.0.5 | 14,300+ Successful Exploits | 4 Leaked UUIDs 🎯 About the Project This repository contains a fully functional Proof of...

TCP-32764

I WILL NOT MANUALLY UPDATE THIS REPOSITORY ANYMORE If you want to add a router in the list, please make a pull-request, also remember to USE THE POC and paste the result in your pull-request. Telnet clients and other solutions may not be relevant some false negative / positive reported. Some rand...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

wifitap

wifitap.py --- WiFi injection tool through tun/tap device Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap french http://sid.rstack.org/index.php/WifitapEN english This program is a proof of concept tool allowing WiFi communications using traffic injection. You'll...

WMD

WMD Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1. To use a module, run the command "use modulecall", e.g. "use...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...

CVE-2026-25053

CVE-2026-25053 Read: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...