Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

amlsec

Identificación Automatizada de Riesgos de Seguridad en Sistemas de Producción Ciberfísicos Utilizando Datos de Ingeniería Basados en AutomationML Este prototipo implementa los métodos presentados en las siguientes dos publicaciones: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated...

zeek-quic

...

EUVD-2026-74017

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55273

CVE-2026-55273 is a vulnerability in Android , specifically in the AppendCommentLine function of AnnotationProcessor.cpp . The root cause is improper input validation , described as a possible supply chain risk, which can lead to local escalation of privilege with only low privileges required and...

cve-2021-44228-log4j-exploits

CVE-2021-4428 Reproduction This DEMO is a replication of the Log4j2 ultra-high-risk RCE vulnerability CVE-2021-4428, aiming to understand the harmfulness of this vulnerability and make targeted defenses based on your system's situation. Warning This DEMO is solely for technical research purposes...

EUVD-2026-72914

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Vulnerability discoverd by me CVE-2019-15233 Advisory: advisory Basic Info root@kitploit: Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site...

yalu102

yalu102 一个由 qwertyoruiopz 和 marcograssi 创建的面向 64 位设备的 iOS 越狱工具，目前仍处于“开发中”状态。 请仅通过“Issues”标签页提交与代码相关 的问题。如果你需要支持，请先在 /r/jailbreak 上搜索，然后再在那里提问。 支持的设备和 iOS 版本 设备| 版本 ---|--- iPad Pro| iOS 10.0.0 - iOS 10.2 iPhone 6S| iOS 10.0.0 - iOS 10.2 iPhone SE| iOS 10.0.0 - iOS 10.2 iPhone 5S| iOS 10.0.0 - iOS...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device. Product Details Product: COMpact 3000 ISDN,...

webshell

webshell | English | Türkiye Este es un proyecto de recopilación de webshells. Quien da una rosa se queda con el aroma en la mano; si descargan este proyecto, por favor, envíen también shells. Este proyecto incluye varios scripts de uso común. como: asp, aspx, php, jsp, pl, py Si envían webshells...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 High-risk vulnerability CVE-2026-43499, implementation on the 5.10 kernel and MediaTek MT6983V...

SentinelStream-AI

SentinelStream AI | Next-Gen SIEM & SOAR Platform Project Overview SentinelStream AI is a high-velocity Security Information and Event Management SIEM platform designed to bridge the gap between asset vulnerability and real-time threat intelligence. Built as a "Workshop-Ready" product, it allows...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockerized NGINX instances: pattern-based “risky rewrite” snippet vs remediated named-capture snippet, pinned to nginx:1.30.0-alpine / nginx:1.30.1-alpine. Scripts run benign curls, dump nginx -T, and archive evidence. For configuration review...

Loracrack

Loracrack - LoRaWAN session cracker A PoC for exploiting weak or shared Application Keys Created by Sipke Mellema of Applied Risk This is a Proof-of-Concept for demonstrating the dangers of using the same AppKey on multiple LoRaWAN nodes. This repository holds a toolbox for cracking LoRaWAN sessi...

google-ctf

Google CTF This repository lists most of the challenges used in the Google CTF since 2017, as well as most of the infrastructure that can be used to run them. IMPORTANT - The code in the 201x and 202x folders have unfixed security vulnerabilities. These are there on purpose, and running these on...