panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...

CVE-2026-24858

CVE-2026-24858 Vulnerability Analysis Report Full Version with Sources Fortinet FortiCloud SSO Authentication Bypass Vulnerability Document Version : 2.0 Full Source Attribution Version Last Updated : January 29, 2026 Purpose : Security Audit, Technical Documentation, Incident Response 📋 Table of...

lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode

A flaw was found in lrzsz. The lrz receive utility fails to properly sanitize absolute file paths in restricted mode, only checking for relative path traversal sequences. A remote attacker transmitting files can exploit this vulnerability to write or overwrite arbitrary files outside the intended...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

CVE-2026-88041

A flaw was found in Apache Tomcat. Due to an incomplete cleanup vulnerability, HTTP Hypertext Transfer Protocol trailer headers from a previous request can persist and leak into a subsequent request processed on the same connection. This issue may allow a remote user to access sensitive request...

CVE-2023-48084

CVE-2023-48084 Python exploit for the CVE-2023-48084 - Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. The exploit uses /admin/bannermessage-ajaxhelper.php?action=acknowledgebannermessage&id= to execute SQL queries, and...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

mysql-set-role-leftover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-set-role-leftover mysql-set-role-leftover Class: Privilege leftover FILE as mysqld UID; not OS LPE Reach: Remote MySQL Community Server mysqld 26.7.0 06a5c1c - Oracle SET ROLE ALL EXCEPT rfile or SET ROLE DEFAUL...

CVE-2020-11800

Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a local image usin...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Unauthenticated SQL Injection Description The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due...

CVE-2021-29447

CVE-2021-29447 PoC This repository contains a Proof of Concept PoC exploit for the CVE-2021-29447 vulnerability, affecting WordPress 5.6 and 5.7 using PHP 8. The exploit demonstrates how an attacker, with the ability to upload files, can exploit an XML parsing vulnerability in the Media Library,...

curl: IDN decoding inserts authority delimiters and can redirect proxy CONNECT to a different host

IDN decoding can insert authority delimiters: CURLUPUNYCODE output does not round-trip and proxy requests carry an ambiguous authority Summary libcurl's IDN decoder accepts a hostname containing U+FF20 FULLWIDTH COMMERCIAL AT ＠. libidn2's TR46 transitional fallback converts it to ASCII @...

CVE-2025-29556

CVE-2025-29556 – ExaGrid Security Officer Account Creation Bypass 📝 Overview Vulnerability Title : Unauthorized Creation of Security Officer Account Product : ExaGrid EX10 Backup Appliance Version Affected : Tested on current version at disclosure Versions Affected : 6.3 – 7.0.1.P08 CVE ID :...

CVE-2026-31431

🐞 CVE-2026-31431 - Copy Fail A logic flaw in authencesn chained through AFALG and splice into a controlled 4-byte write in the page cache of any readable file on the system. No race condition, no offsets, no compiled payload. The same 732-byte script gains root on every Linux distribution since...

sqlite-rtree-rowid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rtree-rowid0 sqlite-rtree-rowid0 Class: UAF Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc -...

sqlite-rsync-ssh

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rsync-ssh sqlite-rsync-ssh Class: RCE command injection Reach: Remote UI:R SQLite 3.53.4 b09c88c sqlite3rsync quotes USER@HOST:PATH for local /bin/sh -c. OpenSSH then space-joins the remote argv for the login...

CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Unauthenticated Remote Code Execution RCE in Palo Alto Networks PAN-OS User-ID Portal 📋 Vulnerability Details Property| Value ---|--- CVE ID| CVE-2026-0300 Vulnerability Type| Unauthenticated Remote Code Execution Affected Component| Palo Alto Networks PAN-OS User-ID Portal...

HomeLab

HomeLab - Network Documentation Overview HomeLab is a GNS3 lab built on a single laptop OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB to practice networking, systems administration, and offensive security in one environment. It models a perimeter with a firewall Cisco ASAv, a DMZ Ubuntu Server, a...

Hayabusa-Bulk-Runner

Hayabusa-Bulk-Runner A PowerShell wrapper that runs Hayabusa across a folder of KAPE collections, one run per host, and rolls the results up into a single cross-host triage view. Hayabusa already takes a whole directory with -d, and its HTML summary breaks the results down by computer. A folder o...