39475 matches found
asn-search
asn-search This tool will dump the ASN information using Hurricane Electric This tool runs on Docker, and you can either use an image I have already created: docker run -it --cap-add=SYSADMIN tuxotron/asn-search Or you can build your own: docker build -t asn-search . docker run -it...
CVE-2017-15220-vxsearch-rce
CVE-2017-15220 – VX Search Enterprise Remote Buffer Overflow Remote buffer overflow vulnerability in VX Search Enterprise 10.1.12. Vulnerability Details CVE: CVE-2017-15220 Product: VX Search Enterprise Version: 10.1.12 Impact: Remote Code Execution Description VX Search Enterprise 10.1.12 is...
CVE-2020-15053
CVE-2020-15053 : Artica Proxy before 4.28.030418 Community Edition allows Reflected Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 00...
log4j-scanner
log4j-scanner Log4j 2 CVE-2021-44228 vulnerability scanner for Windows OS. Example Usage Usage .\log4j-scanner.exe Terminal is used to output results, deploy this to machines via RMM and Start/Report from PowerShell or CMD Prompt. Build from source git clone...
CVE-2016-10993
CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...
rConfig_rce
rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...
CVE-2023-51504
CVE-2023-51504 Это докеризированное воспроизведение SQL-инъекции в MotoCMS см. exploit db Описание MotoCMS версии 3.4.3 SQL-инъекция через параметр keyword по ссылке https://template189526.motopreview.com/store/category/search/?keyword=1 Воспроизведение уязвимости включало определение в Dockerfil...
CVE-2023-27704
CVE-2023-27704 CVE-2023-27704 Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS fix at Everything 1.5 alpha Suggested description Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of...
CVE-2023-45542
CVE-2023-45542 A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: q Exploit - Proof of Concept POC Reflect...
CVE-2022-22980
SpEL RCE Exploit - CVE-2022-22980 Exploit for remote code execution RCE on Spring Data via SpEL injection Spring Expression Language. Descriptions Vulnerability The box exposes an endpoint /search that accepts a trackingid parameter vulnerable to SpEL injection. This injection allows the executio...
CVE-2025-50383
CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...
CVE-2025-33053_PoC
CVE-2025-33053 POC Exploit Overview The working directory in a .url file can be set to a foreign WebDAV server. When opened by a Windows client, dependencies for the executable defined in the URL field are searched for in the foreign WebDAV share. If an arbitrary executable or DLL is given the sa...
CVE-2022-47447
CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...
CVE-2024-0670
CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...
ablation
Ablation — это фреймворк для обратной разработки, предоставляющий ровно те же базовые возможности дизассемблирования, декомпиляции и анализа бинарных файлов, что и инструменты отраслевого стандарта, такие как Ghidra, IDA Pro и Binary Ninja. В сочетании с Claude Code или OpenAI Codex он превращает...
XWiki < 4.10.15 - Sensitive Information Disclosure
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...
AgentDoxx: Agentic Re-Identification of Anonymized Text with Web Search
As Large Language Models LLMs gain tool use capabilities such as web search, they can retrieve and cross-reference public information, creating privacy risks beyond memorization. One manifestation is re-identification: linking an anonymized interview transcript to a named individual. Yet without...
ASC
Droid ASC: оптимизация компилятора R8 как примитив декомпилятора https://blackhat.com/europe/arsenal/schedule/index.htmldroid-asc-r8-compiler-optimization-as-a-decompiler-primitive-54834 При декомпиляции огромных Android APK стандартная процедура — ждать. Мы ждём, пока инструменты съедят гигабайт...
