sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

sak1to-shell

sak1to-shell मल्टी-थ्रेडेड, मल्टी-ओएस/प्लेटफ़ॉर्म Linux/Windows c2 सर्वर और Windows रिवर्स TCP शेल क्लाइंट दोनों C में लिखे गए हैं। i686-w64-mingw32-gcc के साथ रिवर्स TCP शेल क्लाइंट को कंपाइल करना: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o...

AnySniff

💀AnySniff AnySniff एक उपकरण है जो Windows पर AnyDesk जैसी प्रक्रियाओं के TCP कनेक्शनों की निगरानी करता है। यह खुले कनेक्शनों को ट्रैक करने और IP, पोर्ट और अन्य प्रासंगिक विवरण लॉग करने के लिए CVE-2024-52940 भेद्यता का उपयोग करता है। ⚙विशेषताएँ लक्षित प्रक्रियाओं जैसे AnyDesk के TCP कनेक्शनों की...

Embedded-Backdoor-Connection

पीडीएफ फाइलों के माध्यम से एम्बेडेड बैकडोर कनेक्शन 😈 आपके लिए प्रस्तुत परिचय यह प्रदर्शन वीडियो दिखाता है कि हम लक्ष्य को निर्दोष दिखने वाली PDF फाइल भेजकर पीड़ित के डिवाइस को कैसे नियंत्रित कर सकते हैं, जिसमें वास्तव में एम्बेडेड पेलोड होता है। इस एक्सप्लॉइट को CVE-2010-1240 के रूप में सार्वजनिक...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

CVE-2018-19629

CVE-2018-19629 Test Environment Docker test environment for CVE-2018-19629 - Hyland Perceptive Content Server Denial of Service. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2018-19629 Severity| High DoS Affected Versions| Hyland Perceptive Content Server 7.1.5 Patched Version| 7.1.5...

ReverseSock5Proxy

Reverse TCP Sock5 Proxy A tiny Reverse Sock5 Proxy Server The Server GUI Built with ImGui :V U can download a prebuilt from Releases. Build You need gcc version 12+ recommended one for windows Conan Package Manager And run any script from the scripts folder, depend on your needs :V Client/Agent...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

PT-2026-85292

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1 Description A denial of service issue exists in the MOOSCommServer::ListenLoop function. The accept thread performs a blocking receive without a timeout during the wire-protocol handshake. An attacker can...

CVE-2018-6537.RCE

CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF via Host Header Injection -orange Summary A Server-Side Request Forgery SSRF vulnerability exists in the Xiaomi Mi Router 4A Gigabit Edition. The router's web interface fails to validate the HTTP Host header, allowing an unauthenticated attacker ...

CVE-2026-26446

A flaw was found in Stomper. An unauthenticated client can trigger a denial of service by closing their TCP connection at specific points while a broker is sending data. This action causes the server process to receive a SIGPIPE signal, leading to its immediate termination and a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-26446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process...

GHSA-QXVW-FVWX-5CP7 org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...

CVE-2026-26446

Stomper (a STOMP message broker, commit 5e2741e ) is vulnerable to Denial of Service via an unhandled SIGPIPE signal. When the broker sends data to a client whose TCP connection was already closed by the peer, the server process immediately terminates, crashing the service. Any unauthenticated cl...

EUVD-2026-66755

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...

EUVD-2026-66753

Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client or a later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference a pointer to a...

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...