duckdb

Prueba Jepsen DuckDB Pruebas Jepsen para la base de datos DucKDB. Se ejecuta localmente, en lugar de en un clúster remoto. La prueba genera una colección de procesos locales que abren un archivo DuckDB localmente e interactúa con ellos a través de STDIN/STDOUT. Este es un prototipo temprano. Se...

Dependency Scanning

Componente para el Escaneo de Dependencias y Licencias Este componente genera un CycloneDX Software Bill of Materials, que es utilizado por GitLab para identificar las dependencias de un proyecto y sus licencias. Este CycloneDX Software Bill of Materials es compatible con la taxonomía de GitLab...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer...

CVE-2024-42327

PoC for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the...

cve-2019-1003000-jenkins-rce-poc

إثبات المفهوم: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative إثبات مفهوم يسمح للمستخدمين الذين لديهم صلاحية Overall/Read وصلاحية Job/Configure واختيارياً Job/Build بتجاوز حماية الصندوق الرمل sandbox وتنفيذ ك...

CVE-2025-51403

Exploit Title: LiveHelperChat 4. Save the changes. 5. Revist the Department Assignment settings page and edit the Alias Nick field, the...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Backdoor Exploit This is a Python-based exploit script for the infamous backdoor found in vsftpd version 2.3.4. When triggered, it opens a shell on port 6200 — granting remote command execution as the root user in some vulnerable setups. About the Vulnerability vsftpd...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application. For educational and research puproses only. CVE-2023-23397 preview This CVE aimed to retrieve NetNTLM hash logged in user from Microsoft Outlook client version 2016 except last patched version...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — RCE عبر مرفق Pickle في ClearML نظرة عامة الحقل| التفاصيل ---|--- CVE| CVE-2024-24590 البرنامج| ClearML الإصدارات المتأثرة| 0.17.0 – 1.14.2 الثغرة| إلغاء تسلسل غير آمن عبر pickle لمرفقات المهام المصادقة| يتطلب صلاحية كتابة لمشروع ClearML التأثير| تنفيذ أكواد عن بُعد على أي جهاز...

WebGoat.NET

From the prompt, cd into the WebGoat.NET DB directory % cd /WebGoat.NET/DB Start the mysql utility, giving the name and password, if needed of a user permission to create databases. For example, to use the default root user: % mysql --user=root Create the webgoatcoins database and load the schema...

CVE-2024-29973

CVE-2024-29973 Exploiter, una herramienta de detección y explotación de vulnerabilidades para CVE-2024-29973 con rendimiento asíncrono. Instalación: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help Uso: python3 exploit.py -h / ...

PowEnum

PowEnum Penetration testers commonly enumerate AD data – providing domain situational awareness and helping to identify soft targets. PowEnum helps automate the cartological view of your target domain. PowEnum executes common PowerSploit Powerview functions and combines the output into a...

CVE-2023-29007

CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

unimap

Unimap Escanea solo una vez por dirección IP y reduce los tiempos de escaneo con Nmap para grandes cantidades de datos. Unimap es una abreviatura de "Unique Nmap Scan ". La herramienta puede ejecutarse en Linux, OSX, Windows o Android Termux sin problemas. ¿Por qué? Si tienes planes de ejecutar u...

CVE-2023-28432

CVE-2023-28432 MinIO has an information disclosure vulnerability. An unauthenticated remote attacker can obtain all environment variables by sending a specially crafted HTTP request, including MINIOSECRETKEY and MINIOROOTPASSWORD, causing sensitive information leakage, which may ultimately allow...

Osint-Sync

Osint Sync - Extensión de Navegador OSINT Una potente extensión de navegador para investigación de inteligencia de fuentes abiertas OSINT. Busque nombres de usuario, correos electrónicos y números de teléfono en más de 20 plataformas con acceso integrado a herramientas OSINT premium como GHunt,...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid,...