68713 matches found
lblfixer_cve2020_5250
LabelGrup Networks, official PrestaShop Partner Module for PS 1.7.X to fix CVE-2020-5250 vulnerability WIP Check: https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 Visit our website: https://www.labelgrup.com...
FDD-book
FreeBSD Device Drivers From First Steps to Kernel Mastery by Edson Brandi · Version 2.0 April 2026 About This Book FreeBSD Device Drivers: From First Steps to Kernel Mastery is a free, open-source book that takes you from "I've never written kernel code" to "I can write, debug, and submit...
CVE-2019-17240
CVE-2019-17240 Exploit Las versiones hasta la 3.9.2 inclusive del CMS Bludit son vulnerables a una evasión del mecanismo anti-fuerza bruta que está implementado para bloquear a los usuarios que hayan intentado iniciar sesión incorrectamente 10 veces o más. La vulnerabilidad fue descubierta por...
CVE-2015-3224
CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...
BRIntelcollector
BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...
log4j-scan
1 Usage Instructions CVE-2021-44228 log4j 2.x rce vulnerability detection tool, sends GET requests to the target URL and uses DNSlog to check for responses. root@kitploit: $ python3 log4j-scan.py -h Usage: python log4j-scan.py -u Options: -h, --help show this help message and exit -u URL, --url=U...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
Log4Shell-PoC-Application
☕ Aplicación PoC de Log4Shell Aplicación web basada en Spring framework para prueba de concepto de vulnerabilidades log4shell Instalación y Ejecución !Important Se requiere JDK 1.8 8u131 en desarrollo para lanzar este proyecto Use el Dockerfile proporcionado para compilar y ejecutar la imagen...
CVE-2019-19633
CVE-2019-19633 lib/G/functions.php in Chevereto 1.0.0 through 1.1.4 Free, and through 3.13.5 Core, allows an attacker to perform bruteforce attacks without triggering the implemented protection mechanism by manipulating the X-Forwarded-For header in the request. The IP in the header has to be...
openssl
Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...
CVE-2022-24181
CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...
CVE-2025-29927
CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...
CVE-2023-51764-POC
based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...
WAMpage
WAMpage WAMpage - Una cadena de explotación LPE de root para WebOS CVE-2022-23731 Este exploit es principalmente de interés para otros investigadores: si solo quieres rootear tu TV, probablemente quieras RootMyTV, que ofrece un root persistente y fiable con un solo clic. Actualmente solo es...
CVE-2026-8181
CVE-2026-8181 - Burst Statistics Authentication Bypass Exploit Python 2.7 exploit for the Burst Statistics plugin vulnerability CVE-2026-8181 that allows unauthenticated attackers to bypass REST API authentication, retrieve application passwords, and create new administrator users on vulnerable...
Openssl_G2.5_New
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2025-29927
CVE-2025-29927 — Next.js Middleware Authentication Bypass Overview Imagine a bouncer in front of the club, but if you tell him "I'm already in," he lets you pass without checking. That's exactly what CVE-2025-29927 is. Middleware in Next.js runs before a request is processed, making it the ideal...
malwoverview
Malwoverview !Alt...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...