1298360 matches found
CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyα» n HoΓ n...
Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover
Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK...
Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub
Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.4.0 Patch 8 Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time...
GooFuzz
GooFuzz - The Power of Google Dorks Credits Author: M3n0sD0n4ld Twitter: @DavidUton Description: GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. What's new...
Windows-Local-Privilege-Escalation-Cookbook
Windows Local Privilege Escalation Cookbook Table of Contents Windows Local Privilege Escalation Cookbook Table of Contents Disclaimer Description Keynote Definition Useful Tools Vulnerabilities References Disclaimer This repository, "Windows Local Privilege Escalation Cookbook" is intended for...
nagiosxi-root-rce-exploit
nagiosxi-root-exploit Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with perissions to manage plugins. Details The...
DockerENT
DockerENT DockerENT is activE ruN time application security scanning T ool RAST tool. It is a pluggable framework written in Python. It comes with a CLI application and a clean Web Interface written using StreamLit. DockerENT has been designed to detect weak security misconfigurations in producti...
CVE-2023-27524
CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is running with an insecure default configuration CVE-2023-27524. The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRETKEYs. The --validate flag can be...
Exploit for CVE-2026-109618
php2shell-verify Verification toolkit and source-level analys...
DSXS
Damn Small XSS Scanner Damn Small XSS Scanner DSXS is a fully functional Cross-site scripting vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...
CVE-2021-36460
CVE-2021-36460 NVD CVE-2021-36460: https://nvd.nist.gov/vuln/detail/CVE-2021-36460 MITRE CVE-2021-36460: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-36460 CWE-836: Use of Password Hash Instead of Password for Authentication The VeryFitPro app Android: com.veryfit2hr.second, iOS =3.3.7...
OneLogicalMyth_Shell
OneLogicalMythShell This HTA shell was created to assist in breakout assessments. I built this over a year ago initally and thought others might find it useful so have now made it public. Please feel free to submit pull requests. Features File Explorer List Drives - Lists all local drives on the...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
aws-security-assessment-solution
Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...
XSS-LOADER
π XSS-LOADER TOOLS π Written by TMRSWRR Version 1.0.0 All in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER Instagram: TMRSWRR π· Screenshots π· π π How to use π π π Read Me π This tool creates payload for use in xss injection Select default payload tags from parameter or write yo...
ossem-power-up
OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...
bucky
Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...
CVE-2026-31431-Copy-Fail
CVE-2026-31431 β Copy Fail Severity: Critical CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Status: Public Exploit Available Summary CVE-2026-31431 "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel cryptographic subsystem. Any unprivileged user can escalate to roo...
opensquat
openSquat Core π Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License π― What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...
CVE-2026-23550
CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...