9189 matches found
FTP Fetch, Linux Reboot
Fetch and execute an MIPSLE payload from an FTP server. A very small shellcode for rebooting the system using the reboot syscall. This payload is sometimes helpful for testing purposes. Requires CAPSYSBOOT privileges. Module Options...
FTP Fetch, Linux Execute Command
Fetch and execute an MIPSLE payload from an FTP server. A very small shellcode for executing commands. This module is sometimes helpful for testing purposes as well as on targets with extremely limited buffer space. Module Options msf use payload/cmd/linux/ftp/mipsle/exec msf payloadexec show...
XSS
XSS XSS notes, payloads, and bypass techniques for bug hunti...
wp-cve-exploits
wp-cve-exploits Nuclei detection templates and validated PoC...
tools-hacking
HackerAI Tools Collection Koleksi lengkap 85 tools hackin...
[SECURITY] Fedora 43 Update: kind-0.31.0-4.fc43
Kubernetes IN Docker - local clusters for testing Kubernetes...
VEXAIoT: Autonomous IoT Vulnerability EXploitation Using AI Agents
Internet of Things IoT systems are inherently vulnerable due to constrained hardware, outdated firmware, and insecure default configurations, creating a need for scalable and adaptive security testing approaches. While recent adoptions of Large Language Model LLM agents have demonstrated promise ...
CVE-2026-54695
CVE-2026-54695 - Pipecat Telephony WebSocket /ws Unauthenticated Call-Control Abuse Pipecat prior to v1.4.0 registers a /ws WebSocket endpoint for telephony testing that accepts connections without authentication. An attacker can send a crafted handshake containing a caller-supplied callSid, whic...
Exploit for Authorization Bypass Through User-Controlled Key in Liferay Digital_Experience_Platform
CVE-2025-OpenSSL-RCE Exploit What is this CVE? This is a b...
Malicious code in testing-d3do (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c008bcf9a72a02f11c556396a39d6de999bfad0cfa389ddac01929d19bb34d8 On npm install, this package's postinstall script collects host identifiers os.hostname, os.userInfo, current working directory, and external IPv4...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
Cisco IOS XE CVE-2023-20198 Scanner A Python wrapper script f...
Exploit for Insecure Default Initialization of Resource in Apache Solr
CVE-2026-44825 Apache Solr Scanner This repository contains a...
POC
🛡️ POC Vulnerability Verification Toolset !License: MITht...
MAL-2026-6968 Malicious code in rony-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1a5728b472335e46d1df74becaf6355424f1f32d068bb517c079d88cacc03c The package's postinstall hook auto-executes index.js on npm install. The script collects the installer's OS username os.userInfo.username, hostname...
Malicious Package
Overview rony-testing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in rony-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1a5728b472335e46d1df74becaf6355424f1f32d068bb517c079d88cacc03c The package's postinstall hook auto-executes index.js on npm install. The script collects the installer's OS username os.userInfo.username, hostname...
PYSEC-2026-2068 Improper line feed handling in zenml
A denial of service DoS vulnerability exists in zenml-io/zenml version 0.56.3 due to improper handling of line feed \n characters in component names. When a low-privileged user adds a component through the API endpoint api/v1/workspaces/default/components with a name containing a \n character, it...
MAL-2026-7418 Malicious code in serverless-twi-testing (npm)
--- -= Per source details. Do not edit below this line.=-...