CVE-2025-28062

CVE-2025-28062 — CSRF Vulnerability to Account Takeover in ERPNext 14.82.1 , 14.74.3 📌 Summary A Cross-Site Request Forgery CSRF vulnerability was discovered in ERPNext 14.82.1 and 14.74.3 , allowing attackers to perform unauthorized actions such as: User enumeration Account takeover password res...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

CVE-2026-92893 Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters

A flaw was found in the foremanansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's viewhosts permission. An authenticated user whose host visibility is restricted by a...

CVE-2026-92893

CVE-2026-92893 affects the foreman_ansible Ruby gem (a Foreman plugin). The Ansible inventory API controller builds its host query using an unscoped Host.where call that fails to enforce the search filter tied to the caller's view_hosts permission. As a result, an authenticated user whose host vi...

CVE-2026-92893 Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters

A flaw was found in the foremanansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's viewhosts permission. An authenticated user whose host visibility is restricted by a...

EUVD-2026-81418

A flaw was found in the foremanansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's viewhosts permission. An authenticated user whose host visibility is restricted by a...

AES-Killer

AES Killer Burpsuite Plugin Burpsuite Plugin to decrypt AES Encrypted traffic on the fly Requirements Burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt...

CVE-2023-2598

CVE-2023-2598 Privilege Escalation Understand the Compound Page and folio mechanisms in Linux through CVE-2023-2598, and subsequently see if it's possible to complete the exploitation of the 1day CVE-2023-6560. Compound Page huge page Memory is growing larger and larger, but the basic page...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

cve-mcp-server

🛡️ CVE MCP Server AI搭載のセキュリティインテリジェンスをあなたの手元に — 28のツール + ワンコールのtriagecve オーケストレーター、24のデータソース、1つのプロトコル。 Claudeをフルスペクトラムのセキュリティアナリストに変える、本番グレードの Model Context Protocol MCP サーバー です。NVD、EPSS、CISA...

log4j-urlscanner

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

CVE-2024-8529

CVE-2024-8529 LearnPress – WordPress LMS Plugin = 4.2.7 - Unauthenticated SQL Injection via 'cfields' Description The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'cfields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in...

CVE-2022-23378

CVE-2022-23378 : Reflected XSS in TastyIgniter v3.2.2 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version v3.2.2. Mitre URL: https://vulners.com/cve/CVE-2022-23378 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Proof of Concept POC: Admin...

p3-loader

P³-Shellcode Loader - プロセスパラメータポイズニング 著者: Max Hirschberger & Ogulcan Ugur 目次 1. はじめに 2. 一般的なプロセスインジェクションと関連するシステムAPI 3. 必要なWindows内部構造の技術的基盤 3.1 プロセス生成APIとスタートアップパラメータ 3.2 プロセス環境ブロック PEB 4. プロセスパラメータポイズニング P³ 4.1 ポイズニングされたパラメータでプロセスを開始する 4.2 新しいプロセス内で注入データを特定する 4.3 注入されたコードの実行 4.4...

CVE-2025-2945_PgAdmin_PoC

CVE-2025-2945PoC pgAdmin Proof of Concept pgAdmin Query Tool RCE CVE-2025-2945 – Python Proof of Concept ⚠️ Disclaimer This repository contains a proof-of-concept exploit for CVE-2025-2945, a critical remote code execution vulnerability in pgAdmin 4 versions prior to 9.2. Use this code only in...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

content

欢迎！ 本项目的目的是为各种平台 — Red Hat Enterprise Linux 、 Fedora 、 Ubuntu 、 Debian 、 SUSE Linux Enterprise Server SLES 、... — 以及产品 — Firefox 、... — 创建 安全策略内容 。 我们力求让以所有常用格式编写新的安全内容以及维护现有安全内容变得尽可能简单。 ComplianceAsCode 文档 ComplianceAsCode 博客 在线研讨会 - 作为入门起点非常合适 ComplianceAsCode 中的配置文件 - 每个配置文件的在线 HTML 指南...