CVE-2026-3786

NVD-CVE-2026-3786 https://nvd.nist.gov/vuln/detail/CVE-2026-3786...

Vegile

Vegile - Fantasma en la Máquina Vegile es una herramienta para técnicas de Post-explotación en Linux. Las técnicas de post-explotación asegurarán que mantengamos algún nivel de acceso y potencialmente pueden conducir a puntos de apoyo más profundos en la red de confianza de nuestros objetivos...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...

webkiller

WebKiller V2 Herramienta de recolección de información escrita con Python. Vista previa ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗...

CVE-2026-41940

Based on Watch Tower POC , Supports direct shell access via websocket , and adding root api keys for persistance...

CVE-2025-56381

CVE-2025-56381 — Authenticated SQL Injection in ERPNext / Frappe via orderby and groupby Parameters 📌 Summary ERPNext v15.67.0 and Frappe Framework v15.72.4 contain multiple authenticated SQL injection vulnerabilities in the frappe.desk.reportview.get API endpoint. Malicious input to the orderby ...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origi...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

beagle

Beagle 1. Acerca de Beagle 2. Instalación 1. Docker 2. Paquete Python 3. Configuración 3. Interfaz web 1. Subir datos 2. Navegar por grafos existentes 3. Interfaz de grafo 1. Inspeccionar nodos y aristas 2. Expandir vecinos 3. Ocultar nodos 4. Ejecutar mutadores 5. Alternar tipos de nodos y arist...

matano

Lago de datos de seguridad de código abierto para AWS Matano Open Source Security data lake es un lago de datos de seguridad nativo en la nube de código abierto, construido para equipos de seguridad en AWS. !NOTE Matano ofrece un SIEM en la nube comercial gestionado para una plataforma completa d...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

CVE-2021-42342

CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell include include include include char serverip=""; uint32t serverport=7777; static void...

CVE-2026-3304

CVE-2026-3304 Lab Environment For educational and research purposes only. Attacking systems without authorization is illegal. This lab environment was built by analyzing the Multer 2.1.0 patch and its official test code. The vulnerable server replicates the exact conditions described in the patch...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Critical Remote Authentication Bypass in GNU InetUtils telnetd 🧠 Overview CVE-2026-24061 is a critical vulnerability affecting the telnetd service in GNU InetUtils. It allows an unauthenticated remote attacker to log in as root by exploiting improper handling of environment...

zoneminder

ZoneMinder All documentation for ZoneMinder is now online at https://zoneminder.readthedocs.org Overview ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture, analysis, recording and monitoring of any CCTV or security cameras attached to ...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

CVE-2021-44593

CVE-2021-44593 Public disclosure of CVE-2021-44593. A SQL injection/arbitrary file upload/remote code execution vulnerability in Simple College Website. DESCRIPTION Simple College Website 1.0 is vulnerable to an unauthenticated union-based SQL injection in the "username" parameter of the...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

NETworkManager

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

CVE-2025-60910

This repository does not have a README...

vulescanjndilookup

vulescanjndilookup AUTOMATED TOOL FOR DETECTING VULNERABILITY CVE-2021-44228 Requirements: Python v. 3 Installation: git clone https://github.com/MiguelM001/vulescanjndilookup.git Execution: python3 vulescanjndilookup.py -h python3 vulescanjndilookup.py -d / python3 vulescanjndilookup.py -d...

smartermail-CVE-2026-23760-poc

SmarterMail-CVE-2026-23760-poc A proof-of-concept exploiting an authentication bypass via password reset API for the SmaretMail system administrator account. Vulnerability The vulnerability exists due to an authentication bypass vulnerability in the password reset API. The force-reset-password...

CVE-2024-33298

CVE-2024-33298 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...

CVE-2024-33299

CVE-2024-33299 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

CVE-2025-5947_Exploit

🔍 WordPress Plugin Exploit — Service Finder sf-booking Overview The Service Finder plugin is a booking and service management system for WordPress. Because of its popularity and complexity, some versions have had security issues related to unauthenticated AJAX endpoints or improper access control...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Latest Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Latest Docs .. image::...

CVE-2024-33297

CVE-2024-33297 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name Internal Name field in the "Add new campaign" function. Requirements ...

CVE-2026-24061-GUI

CVE-2026-24061 Vulnerability Detection and Exploitation Tool Thank you🙏 for your Star support; Thank you🙏 for your usage and recognition; Program Overview This is a GUI tool for detecting and exploiting the CVE-2026-24061 vulnerability. This vulnerability is a GNU Inetutils telnetd authentication...

CVE-2026-2005

Upstream patch for CVE-2026-2005 pgcrypto, PostgreSQL 17.7 → 17.8...

firewall-cve

firewall-cve Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability CVE-2021-41338 Security Vulnerability Released: Oct 12, 2021 Assigning CNA: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Attack Vector Local Attack Complexity Low Privileges Required Low User Interaction...

CVE-2025-8081-Elementor

CVE-2025-8081 - Elementor Arbitrary File Read Vulnerability A critical arbitrary file read vulnerability in Elementor WordPress plugin that allows authenticated administrators to read any file accessible by the web server, including sensitive configuration files containing database credentials. 📋...

redsun-bluehammer-undefend-detection-pack

RedSun, BlueHammer, UnDefend, and CrossFamily Detection Pack IMPORTANT: All code and detection logic in this repository is AI-generated. There is no guarantee that these scripts are correct, complete, safe, or suitable for any environment. Use these scripts entirely at your own risk. The reposito...

A-potential-Denial-of-Service-issue-in-protobuf-java

A-potential-Denial-of-Service-issue-in-protobuf-java A potential Denial of Service issue in protobuf-java high severity GitHub Reviewed Published 5 days ago in protocolbuffers/protobuf • Updated yesterday Vulnerability details Dependabot alerts 2 Package com.google.protobuf:protobuf-java maven...

Honeypot-for-CVE-2025-59287-WSUS

wsus-decoy Defensive proof of concept decoy for CVE-2025-59287 WSUS. The decoy emulates WSUS web endpoints on ports 8530 and 8531, captures full HTTP request bodies and headers, stores evidence for forensic analysis, and includes a Windows test harness to validate endpoint, file and process...

HomePWN

HomePwn - Navaja Suiza para Pentesting de Dispositivos IoT . | | \ \ | | \ / \ / / | /\ / / / \ | Y Y Y \ /| | \ / | \ || //||| /\ | //|| / / / / / ☠ HomePwn - Pentesting IoT y Hacking Ético ☠ Creado con ♥ por: 'Ideas Locas CDO Telefonica' HomePwn es un framework que proporciona...

Exploit-LPE-CVE-2026-21721

💥 CVE-2026-21721 Exploit Wrote an exploit for CVE-2026-21721 and tested it on a test bench. 🎯 What's inside A combat privilege escalator: logs in, reads permissions, writes Admin permission=4 on all dashboards. A valid account with Editor rights is required for exploitation. 🧪 Tested on a test...

CVE-2025-41089

CVE-2025-41089: Reflected XSS in Xibo CMS I have discovered a Reflected Cross-Site Scripting XSS vulnerability in Xibo CMS v4.1.2. This issue stems from the application's failure to properly sanitize user-supplied input in the 'Configuration Name' field of certain widgets within the template...

lunasec

LunaTrace LunaTrace es una herramienta de seguridad y auditoría de la cadena de suministro de código abierto. En su núcleo hay una consola web que rastrea tus proyectos y sus dependencias, buscando vulnerabilidades y otros problemas. Esta consola se proporciona como SAAS disponible aquí gratis o...

axios-security-guide

This repository does not have a README...

TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner Improper Access Control in Gurock TestRail versions Input server in http:\ or https:\ format The script will print out the server/file location, status code if not 500, and any interesting keywords found...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

kwetza

Introducción Por Chris Le Roy @brompwnie [email protected] Kwetza es una herramienta que permite infectar una aplicación Android existente con un payload de Meterpreter. ¿Qué hace? Kwetza infecta una aplicación Android existente con plantillas de payload personalizadas o predeterminadas para...

Ubuntu-CVE-2026-3888-patcher

🛡️ CVE-2026-3888 Remediation Script Many Hat Group Security Advisory Tool Overview This script has been developed by Many Hat Group to quickly identify and remediate systems affected by CVE-2026-3888 on Ubuntu environments. It is designed for use across managed fleets, providing: Automated...

CVE-2021-4034

CVE-2021-4034 Writeup: https://ljp-tw.github.io/blog/CVE-2021-4034-Writeup/...

CVE-2021-4034

CVE-2021-4034 A stupid poc for CVE-2021-4034 - Local privilege escalation pkexec SUID binary Vulnerability explained in the advisory here...

vapi

vAPI vAPI es una Interfaz Programada Adversamente Vulnerable que es una API auto-alojable que simula los escenarios del OWASP API Top 10 en forma de ejercicios. Requisitos PHP MySQL PostMan MITM Proxy Instalación Docker docker-compose up -d Instalación Manual Copiando el Código cd git clone...

vapi

vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...

ka-cve-2021-21341

ka-cve-2021-21341...

turkce-wordlist

Este proyecto no contiene ningún dato personal como direcciones de correo electrónico, nombres, teléfonos, etc. Las contraseñas se enumeran únicamente con fines académicos. No es posible asociar las contraseñas con personas reales. Lista de palabras turca Es un estudio realizado para analizar la...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : git push -o '' origin master To review any exploitation of this vulnerability, we recommend th...