CVE-2025-32463

CVE-2025-32463 - Sudo Privilege Escalation PoC /////// Disclaimer ///////////////////////////////////////////////////////////////////////////////////////////////////////////////// This project is provided solely for educational purposes. By using any part of this repository, you acknowledge that...

BlueborneDetection

BlueborneDetection Download To download this tool, you have to clone or download as zip this repository. Usage Build: make Pair with the Android device and start script: ./detectBlueborne Don't forget to use MAC address of the Android device...

noPac

About NoPac exploit, exploiting some old vulnerabilities CVE-2021-42278 and CVE-2021-42287 to impersonate a domain admin from a standard user. No more annoying dependencies, just a single binary holy shit i love Go, Python could NEVER. The -shell flag just spawns impacket-smbexec. You can also ju...

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp through 0.3.1 contains a remote buffer overflow vulnerability in static void ReceiveTCPSocket socket at tcpsocket.hpp, lines 102-110. The buffer overflow affects all corresponding TCP servers. The remote buffer overflow can be triggered by connecting to a socket a...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning https://www.anquanke.com/post/id/152164 Script Source https://www.secfree.com/article-957.html...

ipeeyoupeewepee

ipeeyoupeewepee A scanner and attack suite for hosts on the public internet mostly Cisco routers that forward unauthenticated packets encapsulated in the IP-in-IP and GRE protocols. This vulnerability, known as "Insecure Implementation of Tunneling Protocols," is tracked under CVE-2020-10136 and...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

CVE-2025-29927-Nextjs-Analysis

CVE-2025-29927 Next.js Analysis This repository contains a self-hosted Next.js lab environment created for analyzing CVE-2025-29927 in Docker. Overview CVE-2025-29927 is a vulnerability related to authorization checks implemented in Next.js middleware. This project was built as a local lab to...

Next.js-RCE-CVE-2025-55182

🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...

CVE-2025-31133

CVE-2025-31133 PoC Exploit This document explains the functionality of the provided Proof-of-Concept PoC script for the runc vulnerability CVE-2025-31133. Summary Vulnerability: CVE-2025-31133 - A symbolic link race condition in runc's maskedPaths handling. Impact: A malicious container can bypas...

cve-2025-32711

CVE-2025-32711 EchoLeak Detection Tool 🔐 Overview CVE-2025-32711, nicknamed "EchoLeak," is a critical zero-click vulnerability in Microsoft 365 Copilot that allowed attackers to exfiltrate sensitive organizational data without any user interaction. This repository contains detection and remediati...

git_rce

Remote Code Execution Attack via git clone CVE-2024-32002 Contributors 이정우@Roronoawjd Background This vulnerability is a Remote Code Execution RCE vulnerability that occurs when cloning a git repository containing submodules on case-insensitive file systems such as Windows and macOS. RCE is a...

CVE-2026-23499

CVE-2026-23499: Saleor vulnerable to stored XSS via Unrestricted File Upload Overview Field| Details ---|--- CVE ID| CVE-2026-23499 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products saleor/saleor Details Saleor allowed authenticated staff users or Apps to upload...

brotli-cve-check

brotli-cve-check Scans a project or container image for CVE-2026-111497 , a buffer overflow in the Brotli decoder. It rates the criticality as Critical, High, or Medium and lists the steps to fix it. The repo ships two pieces: Script skills/brotli-cve-check/scripts/brotlicheck.py: does the actual...

FFTStegPic

FFTStegPic A python script for digital image steganography using Fast Fourier Transform. May be useful for some steganography CTF challenges...

ConMachi

Conmachi Container Scanner Is It Wrong To Pick Up Capabilities In A Container? Conmachi is a tool written in Golang intended to be used to collect information about a container environment and list potential security issues. It can be statically compiled so that it can be dropped into a container...

CVE-2026-5118

Divi Form Builder ⚠️ WARNING: This tool is for authorized penetration testing and security research only. Unauthorized access to computer systems is illegal. Use only on systems you own or have explicit written permission to test. More Disclaimer You can see the disclaimer on the cover of...

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level Once you have the credentials of an ordinary mailbox account, it allows you to delegate and take over the inboxes of other users including domain administrators This EXP script is an enhanced...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

AMSIext

AMSIext AMSIext is a Firefox and Chrome plugin that allows you to send any data stream from the browser to AMSI. AMSI is the way to communicate RAM memory with Windows Defender or any other endpoint security system. This means that while browsing the web, AMSIext will alert you to malicious...