Wazuh-RCE

Intro Wazuh RCE 8.4...

CVE-2021-41773-POC

CVE-2021-41773 Vulnerability Reproduction Report Vulnerability Overview CVE ID : CVE-2021-41773 Vulnerability Name : Apache HTTP Server Path Traversal Vulnerability Risk Level : High CVSS 7.5 Affected Version : Apache HTTP Server 2.4.49 Vulnerability Description : Apache HTTP Server version 2.4.4...

CVE-2018-16711

CVE-2018-16711 PoC code for CVE-2018-16711 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/advancedsystemcarefree.php...

directus-security

directus-security Audit any Directus instance for the misconfigurations that actually leak data — public-role read exposure, user enumeration, unauthenticated version/schema leaks, GraphQL introspection, and the search-param field-enumeration oracle — and prove each one live with an anonymous...

CVE-2025-14269

CVE-2025-14269 A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with...

exploit-nginx-1.10.3

This repository does not have a README...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

CVE-2023-23138

ruby-rail-properties CVE-2023-23138 This is a short view of ruby on rails properties misconfiguration sometimes developers forgot to disable this endpoint /rails/info/properties if this endpoint was enabled on the host, that's mean an attacker can see part/all of the following information:...

py

if you find any bugs report it at Github user issues Still in development Support win7 to win11（last） MCP 配置 / MCP 使用方法 PYArkClient 内置一个 MCP Streamable HTTP 服务端 ，任意 MCP 客户端（Claude Code / Claude Desktop / CodePilot 等）都能调用它提供的内核级 ARK 工具（进程 / 线程 / 模块 / 内存 / SSDT / 回调 / 注入 / dump 等）。 1. 前置条件 以 管理员...

PagSeguro-Connect-Para-WooCommerce-CVE-Report

PagSeguro-Connect-Para-WooCommerce-CVE-Report Disclosure for CVE-2025-10142 CVE-2025-10142 - Vulnerability in PagSeguro-Connect-para-WooCommerce This repository discloses a vulnerability discovered in PagSeguro-Connect-para-WooCommerce = 4.44.3,WordPress plugin developed by Ricardo Martins. 🛠...

CVE-2026-39938

Vulnerability Report: Cacti Unauthenticated RCE on Graph Image Researcher: K | Product: Cacti ≤ 1.2.30 | CVE: CVE-2026-39938 01 Vulnerability Summary Field| Value ---|--- Product| Cacti — The Complete RRDtool-based Graphing Solution Affected Versions| ≤ 1.2.30 Vulnerability Class| CWE-22: Path...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

telerik-scanner-cve-2017-9248

Telerik CVE-2017-9248 Vulnerability Scanner V2.0 A comprehensive Python scanner that discovers Telerik endpoints and tests for CVE-2017-9248 cryptographic vulnerability with enterprise-grade bulk scanning capabilities. Features Quick & Discovery Modes: Single path testing or comprehensive discove...

PoC-CVE-2024-44349

PoC-CVE-2024-44349 Vulnerability found and tested in Anteeo WMS - v4.7.31 The vulnerability allows threat actors to craft an SQL command inside the username parameter and disclose data in the underlying database. The impacted versions of ANTEEO B2B WMS are from v.4.7.x to v.4.7.34 excluded. Usage...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage python exp.py http://target.exmaple user password123 Links...

external_zlib_4.4_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2023-30212-LAB

Creating a Vulnerable Docker Environment CVE-2023-30212 Description CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting XSS attacks OURPHP Steps let’s download Dockerfile Open Terminal in the...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins This tool tests for vulnerability in nette/application. How to fix the vulnerability Composer Update dependency to...

nzyme

Nzyme Learn more at https://www.nzyme.org/. Version 2.0.0 of Nzyme is currently in development and alpha releases are available. Contributing There are many ways to contribute and all community interaction is absolutely welcome: Open an issue for any kind of bug you think you have found. Open an...