yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c 缓冲区溢出 差异...

CVE-2015-0311

Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes. 针对CVE-2015-0311的旧版Linux/Firefox端口利用（Adobe Flash Player中的释放后使用漏洞）的重新上传，我出于教育目的创建了它。...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 任意文件删除 PoC ★ 描述 CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p 示例 root@kitploit: python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u http://example.com/ -f...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

JoomSport <= 5.7.7 - SQL Injection

The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Server-Side Request Forgery no autenticado Descripción El plugin de WordPress Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress es vulnerable a Server-Side Request Forgery en todas las versiones hasta la 2.0.82 inclusive. Esto...

CVE-2017-3000

CVE-2017-3000 针对Flash Player常量盲化伪随机数生成器（CVE-2017-3000）的完整利用 最后将WANG和wang插入动态生成的代码堆中。...

CVE-2018-15982

Créditos @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Descripción Script de Aggressor para lanzar un ataque driveby de Internet Explorer mediante el exploit CVE-2018-15982 para Flash player. Versiones de producto afectadas Adobe Flas...

CVE-2017-3078

CVE-2017-3078 Descripción de CVE-2017-3078 Adobe ha lanzado actualizaciones de seguridad para Adobe Flash Player para Windows, Macintosh, Linux y Chrome OS. Estas actualizaciones abordan vulnerabilidades críticas que podrían permitir a un atacante tomar el control del sistema afectado. Descripció...

CVE-2018-4878

作者与鸣谢 作者：Vincent Yiu（@vysecurity） 鸣谢： @evi1cg：帮助测试并保持我的动力 @smgoreli：原始的 Calc.exe PoC @kbandla：他知道，我也知道。; 免责声明 开发此脚本旨在鼓励更多 Aggressor 脚本开发。仅在授权渗透测试中使用！ 描述 此 Aggressor 脚本利用 CVE-2018-4878 漏洞（针对 2017 年 2 月之前的 Shockwave Flash 播放器版本）发起 Internet Explorer 路过式攻击。 使用方法：...

DLL_Injection_On_VLC

Inyección de DLL y CVE-2010-3124 Descripción general 🌱 Este proyecto explora el tema de la inyección de DLL Dynamic Link Library y se centra específicamente en el CVE-2010-3124. CVE-2010-3124 se refiere a una vulnerabilidad de ruta de búsqueda no confiable encontrada en VLC Media Player versión...

cve-2015-0313

CVE-2015-0313 来自 Angler Exploit Kit 的 Adobe Flash 漏洞源代码 cve-2015-0313 参考资料： http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/ http://malware.dontneedcoffee.com/2015/02/cve-2015-0313-flash-up-to-1600296-and.ht...

CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - 未认证的 SQL 注入 该插件在将 REST 路由中的参数用于 SQL 语句之前，未对其进行清理和转义，从而允许未经认证的用户执行 SQL 注入攻击。 设置脚本： 1. git clone https://github.com/kryptonproject/CVE-2024-5522-PoC 2. cd CVE-2024-5522-PoC 3. pip3 install r requirements.txt 4. python3 exploit.py 查找目标： 1. 使用此...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 此脚本为 CVE-2018-15982 创建 swf 载荷，其基于 https://github.com/smgorelik/Windows-RCE-exploits 中的 PoC。该漏洞由 Gigamon ATR 的 Chenming Xu 和 Ed Miles 发现。 该漏洞是一个释放后重用缺陷，可在 Flash 中实现任意代码执行。更多信息见以下链接。 https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/...

CVE-2022-35978-POC

CVE-2022-35978 概念验证 PoC 描述 CVE-2022-35978 是一个影响 Minetest 5.5.1 及之前版本的严重安全漏洞。 Minetest 是一款免费、开源的体素游戏引擎，支持简单的模组制作和游戏创建。在单人游戏模式下，模组可以设置一个全局配置，该配置控制加载用于显示主菜单的 Lua 脚本。当游戏会话退出后，这个脚本会被立即加载。主菜单运行所在的 Lua 环境没有沙箱保护，从而允许它直接干扰用户的系统。 为了缓解此问题，建议用户将 Minetest 更新到已修复该漏洞的 5.6.0 或更高版本。 此漏洞被 NVD 分配了 CVSS v3.1 基础评分...