Payload-and-Polyglot-Lists

Payload & Polyglot Lists Found a payload that doesn't work? Please open an issue with the payload, target context, and what you expected to happen. Pull requests with fixes or new payloads are always welcome. Research is ongoing. This project is under active development and will be updated...

exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

CVE-2025-27817

Disclaimer: The vulnerabilities and reproduction steps described in this document are for cybersecurity research and educational purposes only. No one may use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no liability for any...

CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783：Chrome 沙箱逃逸教育模拟 作者： Byte Reaper @ByteReaper0 概述 本项目是一个面向研究 的教育模拟 ，旨在演示 Google Chrome（版本 134.0.6998.177）中沙箱逃逸漏洞的概念。它利用通过 Mojo IPC 系统的不当句柄验证，说明恶意行为者如何尝试突破浏览器的沙箱并访问受限资源。 注意： 这不是 一个可用的漏洞利用程序。所有操作仅在受控环境中模拟，仅用于学习目的。 特性 1. Mojo IPC 管道模拟 演示如何使用 Chrome 的 IPC API 创建 Mojo 消息管道...

NPM: i18next-http-backend incomplete URL validation permits SSRF

NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...

cve-2026-75650-magento-validation-lab

CVE-2026-75650 / VULN-39341 Docker validation lab This standalone lab reproduces the complete unauthenticated StyleSmuggler HTTP chain on a revision-pinned Magento Open Source 2.4.9 checkout. It then applies Adobe's VULN-39341 patch and proves that the identical request sequence no longer reaches...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Escalada Local de Privilegios en el Kernel de Linux LPE 📖 Visión General CVE-2026-64600 "RefluxFS" es una vulnerabilidad del kernel de Linux que afecta la implementación del sistema de archivos RefluxFS. La falla se origina por una validación incorrecta de los metadato...

Ominis-OSINT

Ominis-OSINT: Web Hunter 🌐🕵️‍♂️ SURPRISE UPDATE SCHEDULED FOR DEVELOPMENT RESCHEDULED. WINTERGATE WILL BE EXPANDING THIS PROJECT Github Actions Visit actions/workflows and chose any of the 3 options to try out Ominis OSINT right from github! Web Search :...

CVE-2020-11890

Hecho por HK CVE-2020-11890: Las validaciones de entrada inadecuadas en la clase de la tabla de grupos de usuarios podrían provocar una configuración de ACL rota que conduzca a RCE Enlace...

EUVD-2026-93458

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are affected by an Improper Certificate Validation vulnerability within the proxy-server component. An unauthenticated attacker located on an adjacent network could exploit this flaw to cause information exposure of storage backend adm...

CVE-2026-67270

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

wp_CVE-2020-35489_checker

wpCVE-2020-35489checker CVE-2020-35489 - Introducción El wpCVE-2020-35489checker es una herramienta de línea de comandos escrita en Python diseñada para comprobar si un sitio web WordPress es vulnerable a CVE-2020-35489. Esta vulnerabilidad en particular proviene de una falla de seguridad en el...

cyclonedx-cli

/ / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add Add...

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - 未授权任意文件上传 CVE-2024-43160 BerqWP – 用于核心网页指标、缓存、CDN、图片、CSS 和 JavaScript 的自动化全合一 PageSpeed 优化插件存在任意文件上传漏洞，原因是在 /api/storewebp.php 文件中缺少文件类型验证，影响所有版本直至并包括 1.7.6。这使得未认证的攻击者能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 如需更多 WordPress 漏洞利用及独家漏洞，请通过 Telegram 联系我 @KtN1990。 使用 运行此漏洞利用程序需要...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass $ amass enum -v -passive -o domains.txt -d example.com -d...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...

CVE-Factory

CVE-Factory: Escalando Tareas Agénticas de Nivel Experto para Vulnerabilidades de Seguridad en Código CVE-Factory es un sistema Multi-Agente para la reproducción de CVEs totalmente automatizada y de extremo a extremo. Dados los registros CVE, el sistema investiga automáticamente los detalles,...