CVE-2025-63499

Targeted Reflected XSS in theme parameter Researchers: Arseniy Poblaguev, Daniil Khomichenok Affected Versions = 5.12.4 https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.4 Date: 02.12.2025 In the theme parameter there are Reflected XSS Vulnerability:...

kygocera

kygocera CVE-2022-1026 Improved Golang Version of Rapid7 PoC for CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ credits to Aaron Herndon / https://twitter.com/ac3lives greets to https://github.com/D4RKMATT3R CVE-2022-1026 install gi...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office Security Feature Bypass CVE-2026-21509 is a Microsoft Office security feature bypass vulnerability CVSS 7.8 , actively exploited by APT28 Russian hackers against Ukraine Reliance on untrusted inputs in security decisions CWE-807 — "breaking the kill bit" Allows...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

idaguides

IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability PoC This script showcases a proof of concept PoC for CVE-2024-21413, a critical security flaw identified in Microsoft Outlook with a CVSS score of 9.8. Dubbed the MonikerLink exploit, this vulnerability carries extensive consequences, such as...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

CVE-2020-0014-Toast

CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...

burp_global_match_replace

Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 — TryHackMe Status: ✅ Completed Date: 30 May 2025 🎯 Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...

CVE-2022-31101

CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...

gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

CVE-2024-37759_PoC

CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...

CVE-2025-26244

CVE-2025-26244-POC The code to exploit this vulnerability can be seen in 'spoof.go'. This imitates as an agent to the C2 server. In order to run this vulnerability we need to know: 1. The listener IP address and Port 2. The public key of the listener. 3. The first time check in URL of the listene...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Affected versions VMware View Planner Harness 4.X Similar to CVE-2021-21978, this vulnerability allows uploading arbitrary files without authentication, and achieving remote code execution by modifying the built-in py script. It is worth noting that commands...

SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

CVE-2026-21514_CVE-2026-21510

CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...

Netryx-OpenSource-Next-Gen-Street-Level-Geolocation

NETRYX Open-Source Street-Level Geolocation Engine Upload any street photo. Get precise GPS coordinates. Sub-50m accuracy. No landmarks needed. Runs entirely on your hardware. Demos · How It Works · Getting Started · Usage · FAQ THIS VERSION IS OLD, USE THIS INSTEAD NEW REPO What is Netryx? Netry...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...