269002 matches found
path-auditor
PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...
jfscan
!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...
metabadger
Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...
QNAP Photo Station < 6.0.3 - Remote Code Execution
QNAP Photo Station versions prior to 6.0.3 contain multiple vulnerabilities that, when chained together, enable unauthenticated remote code execution RCE. id: CVE-2019-7194 info: name: QNAP Photo Station 6.0.3 - Remote Code Execution author: x-stp severity: critical description: | QNAP Photo...
SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...
FreeBSD : databases/p5-DBI -- multiple vulnerabilities (675bc714-b8cd-11f1-ad2b-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 675bc714-b8cd-11f1-ad2b-40b034429ecf advisory. DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: Tenabl...
Debian dsa-6513 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6513 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6513-1 [email protected] https://www.debian.org/securit...
rustproofing-linux
Blindando Linux con Rust Portando errores del kernel de Linux a Rust Este repositorio de código fuente es una colección de ejemplos que acompañan la publicación del blog en https://research.nccgroup.com/?p=18577. NO UTILICES estos ejemplos para nada más que seguir la publicación del blog. Contien...
CVE-2026-28496
CVE-2026-27604 + CVE-2026-28496 — Cadena de RCE Pre-Auth en FOSSBilling Resumen Ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar la cadena de RCE Pre-Auth en FOSSBilling, compuesta por dos vulnerabilidades encadenadas: CVE| Tipo| CVSS v4| GHSA| Descripción...
MCPwnfluence
MCPwnfluence — CVE-2026-27825 & CVE-2026-27826 Two critical vulnerabilities in mcp-atlassian, one of the most popular MCP servers in the ecosystem 4.4K+ GitHub stars, 4M+ downloads. Discovered by the team at Pluto Security. The Vulnerabilities CVE| CVSS| Type| Description ---|---|---|---...
CVE-2026-33453
Apache Camel 4.18.0 — CVE Security Assessment Three critical vulnerabilities in Apache Camel 4.18.0, independently discovered and validated with working proof-of-concept exploits. CVE| Component| Type| CVSS| Verdict ---|---|---|---|--- CVE-2026-33453| camel-coap| Header Injection → RCE| 10.0...
CVE-2025-61319
CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...
Browser-Exploits
Browser-Exploits Some Generic Browser Exploits For Educational Purposes Only...
exploits
exploits Proof-of-concept scripts for several different security vulnerabilities...
CVE-Reverse
Reverse N Days!!! Solo para llevar un registro de todos los CVE que encontramos y revertimos, debería haberlo hecho mucho antes xD...
GHSA-PH9C-7HW9-VHHW vulnerabilities
Vulnerabilities for packages: zookeeper, zookeeper-fips, wazuh-indexer, apache-pulsar, druid, hadoop-fips, apache-pulsar-fips, scala, kafka, akhq, opensearch, spark, hadoop-client-modules, kafka-fips, pinot-fips, apache-nifi, ghidra, pinot, spark-fips, opensearch-fips, apache-camel-karavan-devmod...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: zookeeper, zookeeper-fips, wazuh-indexer, apache-pulsar, druid, hadoop-fips, apache-pulsar-fips, scala, elasticsearch-fips, elasticsearch, kafka, akhq, opensearch, spark, hadoop-client-modules, kafka-fips, pinot-fips, apache-nifi, ghidra, pinot, spark-fips,...
CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784
This repository does not have a README...
Weblogic_Vuln
Prefacio El artículo analiza en detalle las vulnerabilidades históricas de Weblogic desde CVE-2015 hasta CVE-2019, y organiza los POC relacionados en WeblogicVuln. Registra notas de aprendizaje sobre vulnerabilidades de deserialización de Java. Bienvenidos los start e issues. WeblogicVuln POC de...