CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...

Directum Web Agent Code Execution

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

CrocoTime SSRF

The vulnerability in CrocoTime’s employee working hours tracking system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Overview Features Types of Checks WEB ACCESS SYSTEM INFO BYPASS DETECTED Status Types Explanation Getting Started Requirements Usage Arguments Target Specification Custom Variables Output Stylization To Do...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua Authentication Bypass PoC Exploit Simulation CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Since they are often deployed on internal networks or accessible from the Internet, security vulnerabilities in IP cameras can severely impac...

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

cve-2026-31900-lab

CVE-2026-31900 — Vulnerable Lab psf/black GitHub Action RCE via Insecure Regex Validation Field| Detail ---|--- CVE| CVE-2026-31900 CVSS| 8.7 High Advisory| GHSA-v53h-f6m7-xcgm Affected| psf/black GitHub Action v26.3.0 Type| RCE via Supply Chain pullrequest trigger Vulnerability The usepyproject:...

bitcoin

Bitcoin Core integration/staging tree https://bitcoincore.org For an immediately usable, binary version of the Bitcoin Core software, see https://bitcoincore.org/en/download/. What is Bitcoin Core? Bitcoin Core connects to the Bitcoin peer-to-peer network to download and fully validate blocks and...

CVE-2026-5562-Exploit

CVE-2026-5562 Exploit Warning This repository contains a proof-of-concept research script for validating exposure in a controlled environment. It is only for research and education purpose, should not be used against production systems on which you do not have authorization. Install requirements...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6 before v1.83.14 /key/generate endpoint allows low-privileged internaluser to request an API key with wildcard routes "/", and then elevate their own role to proxyadmin via the /user/update endpoint,...

WAFNinja

WAFNinja WAFNinja - Penetration testers favorite for WAF Bypassing WAFNinja is a CLI tool written in Python. It shall help penetration testers to bypass a WAF by automating steps necessary for bypassing input validation. The tool was created with the objective to be easily extendible, simple to u...

cve-2026-31431-poc

CVE 2026-31431 POC This exploit takes advantage of a flaw in the length validation of authencesn in Linux, causing dirty pages to be written back to locations the user has no permission to access, resulting in privilege escalation. The attack principle is mainly based on this repo, with some...

CVE-2024-55968

CVE-2024-55968 POC for DTEX LPE CVE-2024-55968 Affected product: DEC-M DTEX Forwarder version 6.1.1. DTEX is a unified insider risk management platform. Affected component: DEC-M EventReportingService XPC Helper Attack vector: The DTEX Event Reporting Service was found with a privileged XPC helpe...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147Stack-based Buffer Overflow in gmtremotedatasetid Summary A stack-based buffer overflow vulnerability was identified in the gmtremotedatasetid function within src/gmtremote.c. This issue occurs when a specially crafted long string is passed as a dataset identifier e.g...

CVE-2026-0911

CVE-2026-0911 — Hustle Module Import PoC A research / pentest helper tool that tests the upload behavior via the authenticated module import endpoint for the WordPress plugin Hustle wordpress-popup, WPMU DEV under CVE-2026-0911. The CVE-2026-0911.py script in this repository or file set should on...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

mailchecker

MailChecker Cross-language email validation. Backed by a database of over 55 000 throwable email domains. Validate the format of your email uses validator.js email regex underneath and FILTERVALIDATEEMAIL for PHP Validate if the email is not a temporary mail yopmail-like..., add your own dataset ...

CVE-2026-92523

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access nldev component. This input validation vulnerability occurs because the RDMANLDEVATTRSTATHWCOUNTERS attribute's children are consumed without ensuring each payload is exactly one 32-bit unsigned integer u32. A local attacker...