reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

smuggler

/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

CVE-2026-108593

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108593 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108593

The software 9router (versions 0.4.1 through 0.5.99 ) is vulnerable to a configuration injection vulnerability within the POST /api/cli-tools/hermes-settings endpoint. Authenticated dashboard users can exploit this by submitting a baseUrl containing double quotes and newlines, allowing them to in...

EUVD-2026-96401

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

Aether

Aether An AI-driven OSINT analyst that lives on your desktop. Give her a name, an email, a username, a domain, or a photo. She opens a case, runs the target across the open web, reads the metadata, maps the infrastructure, and draws everything she finds into a knowledge graph that grows while you...

CVE-2024-25153

Exploit para CVE-2024-25153 Índice Clique para exibir 1. Introdução 2. Instalação 3. Uso 4. Contribuir 5. Licença Introdução Bem-vindo ao Exploit para CVE-2024-25153! Este projeto é uma solução para explorar a vulnerabilidade CVE-2024-25153 e executar código remotamente no Fortra FileCatalyst...

Arkari

Arkari Just ARKARI | | ---|---|--- Goron से व्युत्पन्न एक और LLVM-आधारित ऑब्फस्केटर परिचय वर्तमान...

CVE-2025-63406-PoC

CVE-2025-63406 प्रूफ ऑफ कॉन्सेप्ट स्थापना Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt उपयोग python3 CVE-2025-63406.py -u -n -p -c तर्क -u, --url:...

POC_CVE-2026-45185

Laboratório de Validação de Template Nuclei CVE-2026-45185 Este repositório não é um repositório de PoC de exploit de propósito geral. É um laboratório local de validação para reproduzir e revisar o comportamento de um template CVE-2026-45185 destinado à contribuição para...

CVE-2026-103648

CVE-2026-103648 — Path Traversal in image-downloader Discovered by:Amirhossein Roustaei @EterNullSec — Eternull Security 📖 Full technical writeup:eternull.net/posts/cve-2026-103648-image-downloader-path-traversal ⚠️ Educational Purposes Only. This repository documents a responsibly disclosed...

Exploit for Path Traversal in Apple Macos

A public, source-guided analysis of CVE-2026-84568 and CVE-2026...

CVE-2023-37073

CVE-2023-37073 Credenciais padrão do Telnet podem levar a divulgação de informações e ataques de negação de serviço DoS. Passos para reproduzir Isso afeta o AP AR-5310 Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Divulgação de informações através de credenciais padrã...

trustmebro

Bypass llm guardrails by confusing it with fabricated tool output. Results · Installation · Quick start · Rules · Architecture TrustMeBro intercepts command-line tools invoked by coding agents such as Codex, Claude Code, and pi. Rules decide whether to return fabricated output, modify the real...

CVE-2026-105889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Vulnerabilidade de Elevação de Privilégio no Agendador de Tarefas do Windows Visão Geral A CVE-2024-49039 é uma vulnerabilidade de Elevação de Privilégio EoP no Agendador de Tarefas do Windows que permite a um atacante autenticado escapar da sandbox AppContainer, elevando da...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 e CVE-2025-34323 Nagios Log Server Exploits de Prova de Conceito para CVE-2025-34322 e CVE-2025-34323 no Nagios Log Server, juntamente com um script combinado para obter um shell como root. CVE-2025-34322 Após a autenticação, substitua seu ID de sessão nestes dois comandos curl. O...