cve-2026-25262-sm8450-research

Экспериментальное подтверждение CVE-2026-25262 на Snapdragon 8 Gen 1 SM8450 Статус: Частичный успех — произвольная запись в SRAM подтверждена, полная инициализация Firehose ожидается. В этом репозитории содержатся результаты экспериментального исследования применимости CVE-2026-25262...

ExchangeFinder

ExchangeFinder ExchangeFinder — это простой инструмент с открытым исходным кодом, который пытается найти экземпляр Microsoft Exchange для заданного домена на основе наиболее распространённых DNS-имен для Microsoft Exchange. ExchangeFinder может определить точную версию Microsoft Exchange, начиная...

NextBypass

NextBypass 🚨 Next.js ミドルウェア認証バイパスツール CVE-2025-29927 機能 CVE-2025-29927 を x-middleware-subrequest ヘッダー経由で悪用 自動ブラウザ統合 Proxy/Bookmarklet 脆弱性スキャンとログ分析 ネットワークトラフィック監視 インストール root@kitploit: git clone https://github.com/your-username/NextBypass.git cd NextBypass chmod +x NextBypass 使用方法 root@kitploit:...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting

Etherpad versions 2.1.0 through 3.0.0 reflect the x-proxy-path request header into admin HTML, JavaScript, and CSS responses without sanitization. An attacker can abuse this behavior to inject crafted content into generated resource URLs, enabling cross-site scripting and cache poisoning scenario...

LumisXP - Cross-site Scripting

A cross-site scripting XSS vulnerability in the XsltResultControllerHtml.jsp component of LumisXP v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via the lumPageID parameter. id: CVE-2024-33326 info: name: LumisXP - Cross-site Scripting author: 0xr2r severity: medium...

MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

Traefik - Open Redirect

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-15129 info: name:...

SPIP < 4.4.22 - Unauthenticated RCE

SPIP 4.4.21 contains a remote code execution caused by mishandling of the X-Spip-Filtre HTTP request header in analyseresultatskel, letting unauthenticated remote attackers execute arbitrary code. id: CVE-2026-77806 info: name: SPIP 4.4.22 - Unauthenticated RCE author: 0xAkoko severity: critical...

Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...

Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass

The official Gitea Docker image through version 1.26.2 ships with REVERSEPROXYTRUSTEDPROXIES set to a wildcard, causing Gitea to trust reverse-proxy authentication headers X-WEBAUTH-USER from any source IP instead of restricting trust to the configured reverse proxy. When reverse-proxy...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

bento

Это программное обеспечение является экспериментальным, но мы принимаем предложения и вклад Bento Toolkit для PT и CTF Bento 弁当, bentō — это однопорционная еда на вынос или домашняя упаковка японского происхождения. Bento Toolkit — это простой и минимальный docker-контейнер для пентестеров и...

cve-2025-29927-poc

CVE-2025-29927-POC Введение Этот репозиторий содержит Proof of Concept PoC для CVE-2025-29927, гипотетической уязвимости, демонстрирующей недостаток в обработке промежуточного ПО middleware в веб-приложении. PoC иллюстрирует, как специально сформированный HTTP-запрос может обойти логику...

Optiva-Framework

Optiva-Framework 🕵️ Webアプリケーションスキャナ 💉 Author : Joker-Security dev-labs ✔️ 説明 : このフレームワークは、あなたのウェブサイトの脆弱性を発見してセキュリティをチェックするために使用できます。また、dorkによるSQLインジェクションの管理者パネル検索、情報収集、ハッシュの暗号化にも使用できます。 ✔️ 機能 : 情報モジュール : ポートスキャナ Whoisルックアップ リバースIPドメインルックアップ HTTPヘッダードメインルックアップ Iplocator IP地理位置情報取得 ハッシュモジュール : Md5...

CVE-2025-29927

CVE-2025-29927: Next.js 미들웨어 우회 취약점 이 저장소는 Next.js에서 내부 헤더 x-middleware-subrequest를 사용하여 인증과 같은 미들웨어 검사를 우회할 수 있는 CVE-2025-29927 취약점을 시연합니다. 취약점 세부 정보 Next.js는 재귀 요청이 무한 루프를 유발하지 않도록 내부 헤더 x-middleware-subrequest를 사용합니다. 보안 취약점은 미들웨어 실행을 건너뛸 수 있음을 보여주며, 이로 인해 요청이 라우트에 도달하기 전에 인증 쿠키 검증과 같은 중요한 검사를...

log4j-CVE-2021-4104

Log4jShell1.x Log4j RCE 1.x PoC Атака Ограничения 1. Цель имеет среду jms 2. Вам нужен доступ для изменения файла log4j.properties Заключение Не так полезен, как log4shell 2.x Тема Log4shell https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Добро пожаловать, чтобы внести вклад в reapoc H...