-CVE-2025-8088

-CVE-2025-8088 POWERSHEL script to check if your device is affected or no 🚨 CVE-2025-8088: WinRAR Zero-Day Alert! 🚨 A critical WinRAR vulnerability CVE-2025-8088 is making headlines – attackers can exploit this flaw in versions 7.13 to execute malicious code just by tricking users into opening a...

CVE-2026-59734-POC

Hacker Glitch 🚨 CVE-2026-59734 — Coolify RCE Exploit OS Command Injection in Health Check → Remote Code Execution Proof-of-Concept exploit for OS Command Injection in Coolify's health check configuration. Any authenticated user could execute arbitrary commands inside deployed containers. 🎯 About...

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

cve-2023-50164

Disclaimer Notwithstanding anything that may be contained to the contrary in your agreements with Sysdig, Sysdig provides no support, no updates, and no warranty or guarantee of any kind with respect to these scripts, including as to their functionality or their ability to work in your...

CVE-2021-26084

CVE-2021-26084 Introduction This write-up provides an overview of CVE-2021-26084 - Confluence Server Webwork OGNL injection 1 that would allow an authenticated user to execute arbitrary code on a Confluence Server or Data Center instance. TL;DR Confluence Server / Data Center makes use of Webwork...

CVE-2026-9082-Mass_Scanner

CVE-2026-9082-MassScanner Mass Scanner For Drupal Exploit CVE-2026-9082 To Setup ExploitPOC Script execute this command : pip install requirements.txt To use the ExploitPOC Script execute this Command : python exploitpoc.py -t targets.txt -o results.txt -p 16 Éna Mass Scanner gia to prósfato...

Minio-Security-Vulnerability-Checker

Minio Security Vulnerability Checker Description This program is a tool created to check the security of Minio systems related to vulnerability CVE-2022-35919. This tool is designed to help users detect potential vulnerabilities in their Minio configuration. Usage 1. Make sure you have Python...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone Dive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun So.... wtf is CFF ? So from my knowledge it's a file format , but let's try to understad what wikipedia says:"CFF acts as a container to store multiple font...

aethel_core

Aethel-Core: Automated Cognitive Defense & Cyber Threat Simulation WAF A hybrid cybersecurity framework built in SWI-Prolog , designed for real-time threat mitigation and generating structured logic datasets for LLM Instruction Tuning and Neuro-Symbolic AI Training. Key Innovations & Architecture...

CVE-2025-8110

CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview CVE-2025-8110 is a critical vulnerability in Gogs self-hosted Git service versions = 0.13.3. The PutContents API validates file paths for directory-traversal ../ but does not resolve symbolic links before writing. An authenticated user can pus...

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions Example python3 text4shell.py 127.0.0.1 192.168.1.2 4444 Make sure to set up a lsitener on your attacking...

logrus-dos-poc

CVE-2025-65637: Logrus Denial of Service Vulnerability This directory contains proof-of-concept code and test scripts for the Denial of Service DoS vulnerability in github.com/sirupsen/logrus, assigned as CVE-2025-65637. Vulnerability Summary CVE ID : CVE-2025-65637 CWE : CWE-400 Uncontrolled...

ColdWer

A cold war on your endpoint. 🥶 ColdWer ColdWer leverages WerFaultSecure.exe PPL bypass to freeze EDR/AV processes and dump LSASS memory on modern Windows systems. C O L D W E R └─┴─┴── WerFaultSecure └─┴──────── LSASS Dump └─┴──────────── Cold Freeze Freeze your EDR/AV. Extract what you need. Sta...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start Install using uv recommended or pipx/pip uv tool install frida-ui Or: pi...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

CVE-2025-29306-PoC-FoxCMS-RCE

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit A Python exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability Multi-threaded for fast scanni...

CVE-2021-46070

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...