dromara__hutool_CVE-2018-17297_4-1-1111

A set of tools that keep Java sweet. -- Homepage: http://hutool.cn/ -- -- QQ Group ②: 871141901 -- Introduction Hutool is a Java toolkit, and just a toolkit. It helps us simplify every line of code, reduce every method, and make the Java language "sweet". Hutool was originally a reorganization...

w12scan-client

w12scan-client Network asset search and discovery engine, large-scale asset identification, graduation project, w12scan client program Design Philosophy The client's philosophy is to only process the data url, ip it receives, without automatically following 301 redirects based on URLs, nor scanni...

Lab4PurpleSec

Lab4PurpleSec Lab4PurpleSec is a segmented cybersecurity homelab for hands-on Red Team and Blue Team practice, combining network and web penetration testing, Active Directory attacks, and defensive monitoring SIEM, IDS/IPS. It is aimed at students and cybersecurity enthusiasts who prefer to build...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence Remote Code Execution Vulnerability CVE-2022-26134 Usage: python CVE-2022-26134.py -u http://127.0.0.1 Batch verification: python CVE-2022-26134.py -f xxx.txt copy URL to txt...

Beleth

Beleth Dictionary based SSH cracker Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt connections to thi...

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction of CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49. This project uses Docker to create an isolated vulnerable environment and a Python PoC to demonstrate controlled file disclosure. Safety: The PoC only accep...

CVE-2024-38475

CVE-2024-38475 exploit CVE-2024-38475modrewrite weakness with filesystem path matching This repository contains a Python script for testing web server vulnerabilities, specifically targeting Apache servers. The script checks for potential issues modrewrite weakness with filesystem path matching t...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

susvibes-jupyter-server-cve-2026-35397

SusVibes Benchmark Task: Jupyter Server Contents Path Resolution This repository contains one complete SusVibes-style benchmark task built from a real upstream Python security fix in Jupyter Server. The task is designed to evaluate whether an agent can reimplement masked contents path-resolution...

eps-CVE-2017-0261

eps-CVE-2017-0261- eps vulnerability CVE-2017-0261 analysis Analysis process idb ida6.1 Intermediate documents Loading the eps program POC code used And the original vulnerability file...

CVE-2023-49314

CVE-2023-49314 Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and enableNodeCliInspectArguments, and thus electroniz3r can be used to perform an attack. There is a tool...

CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Management Interoperability Services(CMIS) 3.0.7-IF15

Summary IBM Content Management Interoperability ServicesCMIS 3.0.7-IF15 addresses CVEs related to log4j, neethi and cxf in v3.0.7-IF15 Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j...

unidbg

unidbg Allows you to emulate an Android native library, and an experimental iOS emulation. This is an educational project to learn more about the ELF/MachO file format and ARM assembly. Use it at your own risk ! Features Support MCP Model Context Protocol for AI-assisted debugging with Cursor and...

CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly -u -p -c --shell SHELL -t, --target - Hoverfly API endpoint required -u, --username - Admin username required -p, --password - Admin password required -c, --command -...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

Pokemon-Shellcode-Loader

Pokémon Shellcode Loader Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you. A tweet came in from @Checkymander about creating a shellcode loader from Pokémon names. Great fun project to mess with the blue team, but there wasn't a POC...

postenum

Postenum makes life easier for security professionals by automating the process of gathering critical system information after gaining a foothold. It helps quickly spot misconfigurations and privilege escalation opportunities, streamlining the path to deeper access. Built to be lightweight,...