CVE-2026-93864

A link following vulnerability exists in the WatchGuard Fireware OS firewall daemon. A local attacker with code execution as a low-privileged system process can overwrite arbitrary files with root privileges and tamper with firewall IP set data. This is achieved by planting a crafted file system ...

OneRuleToRuleThemStill

OneRuleToRuleThemStill An revamped and optimised version of OneRuleToRuleThemAll. OneRuleToRuleThemStill now has a 5% 6.9% reduction in rules 52,000 down to 49,465 48,414 with 0% performance loss against the Lifeboat and LastFM data breaches. Updates: De-duplication of resulting candidate...

forensicscanner

This repository does not have a README...

csrf_casdoor

Casdoor – Cross-Site Request Forgery CSRF Summary Vulnerability: CSRF in /api/set-password allowing password changes without consent. Affected versions: All versions of the software are affected. No patched release is currently available. CVE: CVE-2023-34927 latest yet to be assigned. Exploit...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. Enables unauthenticated remote code execution against servers using rewrite ... ?... + set capture combinations. Original vulnerability...

cve-2026-42945-scan

cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: //xxx.conf: - location XXXXX...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

CVE-2022-24491

CVE-2022-24491 A Zeek detector for CVE-2022-24491: https://vulners.com/cve/CVE-2022-24491 This detector will generate a notice if it sees a portmap set and dump, an action performed when exploiting CVE-2022-24491. Example: separator \x09 setseparator , emptyfield empty unsetfield - path notice op...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

SocialEngineering-Templates

SocialEngineering-Templates a SET framework templates...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V: Multiple Vulnerabilities in vmswitch Multiple bugs are present in WPP code when handling set OID requests, one of them allowing to dereference read access an attacker controlled pointer, and the rest causing out of bounds read accesses. This repository contains...

TEST-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

motionEye CVE-2025-60787 root command injection

CVE-2025-60787 motionEye /set with imagefilename $cmd — executed as root on the next interval snapshot. signingkey must be the SHA1 of the admin password same value stored as @adminpassword in motion.conf. !/usr/bin/env python3 -- coding: utf-8 -- """motionEye CVE-2025-60787 authenticated...

CVE-2026-116487

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

EUVD-2026-109814

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

EUVD-2026-109812

danmuapi before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMINTOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set...

CVE-2026-116485

The danmu_api software (versions prior to 1.21.7 ) is vulnerable to an authentication bypass that allows unauthenticated attackers to modify server environment configurations. This occurs when the application uses the default TOKEN and the ADMIN_TOKEN is unset. By sending POST requests to endpoin...

Ascii-And-Sub-Encoder

ASCII And/Sub Encoder This tool has been created while i was preparing for the offensive security CTP course leading to legacy OSCE certification. The tool generates nasm friendly assembly instructions of a customized Ascii Subtraction Encoder. The development of this tool is based on the...

redis-exploitation

redis-exploitation CONFIG SET For educational purposes only Build $ docker build -t victim . Run $ docker run -d --name victim victim Attack $ docker exec -it victim bash root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config set dir /var/spool/cron/ OK...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...