huntglyph

huntglyph — Detect homograph attacks Homograph attacks leverage the visual similarity of characters from different writing systems e.g., Latin 'a' vs. Cyrillic 'а' to spoof domain names, filenames, or other identifiers, tricking users into believing they are interacting with a legitimate source...

cve-2023-38646-poc

Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646 is a remote code execution vulnerability in Metabase. The vulnerability stems from a security flaw in Metabase's handling of JDBC connection strings when processing the unauthenticated API endpoint /api/setup/validate. An attacker can...

-CVE-2024-39614

Proof of Concept PoC for Denial-of-Service Vulnerability in Django This repository contains a Proof of Concept PoC script demonstrating a denial-of-service DoS vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. The vulnerability lies in the getsupportedlanguagevariant...

text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backported the upstream fix for CVE-2025-48060 heap buffer overflow in jvstringempty to jq 1.6. Backport CVE-2025-48060 – Backported upstream commit c6e0416 “Fix heap buffer overflow when formatting an empty string” from a newer jq version to jq-1.6, adapting intern...

Sojobo

Sojobo - A binary analysis framework Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don't need to install or compile any other external libraries the project is self contained. With Sojobo...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

mnemosyne

Mnemosyne is a generic Windows-based memory scraping tool. It scans a process memory space for a search string or regex unicode and ascii then if found, spits these out either to stdout, a file or a socket to a remote listener. The utility is useful for memory scraping a process, as a...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

cisco-CVE-2023-20198-tester

Cisco Tester: Vulnerability Detection Script Table of Contents Overview Features Prerequisites Installation Usage Output Contributing Overview The ciscotester.py script is designed to assess multiple IP addresses for a specific Cisco vulnerability CVE-2023-20198. It performs an HTTP or HTTPS POST...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...

PoC-CVE-2024-23113

Disclaimer The code and materials contained in this repository are provided strictly for educational, research, and authorized security testing purposes. Prohibited Use Do not use this tool/code against any infrastructure, systems, or networks without explicit, prior written permission from the...

asf__commons-text_CVE-2022-42889_1-9

Apache Commons Text Apache Commons Text is a library focused on algorithms working on strings. Documentation More information can be found on the Apache Commons Text homepage. The Javadoc can be browsed. Questions related to the usage of Apache Commons Text should be posted to the user mailing...

CVE-2026-25253

CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw 1-Click Remote Code Execution PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : OpenClaw Authentication Token Exfiltration Vulnerability description: OpenClaw aka clawdbo...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...