pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

yamaha-smaf-player

Reproductor Yamaha SMAF C++ por Akustikrausch Andreas Wendorf Un pequeño reproductor sin dependencias para tonos Yamaha SMAF .mmf en C++. Le das uno de esos archivos que hacían que tu Samsung, Sharp o Panasonic hiciera deedle-deedle-dee en 2004, y te devuelve audio estéreo limpio. Sin teléfono, s...

CVE-2018-15982

Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...

CVE-2018-4878

Autor y Créditos Autor: Vincent Yiu @vysecurity Créditos: @evi1cg: Ayudándome a probar y mantener mi motivación @smgoreli: PoC original de Calc.exe @kbandla: Él lo sabe, y yo lo sé. ; Descargo de responsabilidad Desarrollado para fomentar más desarrollo de scripts Aggressor. ¡Úselo solo en prueba...

CVE-2018-4878

POC de CVE-2018-4878 CVE-2018-4878 se demostró por primera vez siendo explotado en la naturaleza por TEMP.Reaper. Este repositorio contiene el POC que creamos a partir del malware analizado, que se sabe que funciona contra versiones de 32 bits de Flash 27 explotando una vulnerabilidad de...

cve-2015-0313

CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

JoomSport <= 5.7.7 - SQL Injection

The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Prueba de concepto de eliminación arbitraria de archivos ★ Descripción CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p Ejemplo python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test pytho...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 desbordamiento de búfer en ty.c del reproductor multimedia Diff...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2017-3000

CVE-2017-3000 Un exploit completo de CVE-2017-3000 en Flash Player Constant Blinding PRNG Inserta WANG y wang en el heap de código generado dinámicamente al final...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Unauthenticated Server-Side Request Forgery Description The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This...

CVE-2026-104673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...

CVE-2026-102914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.2...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 This script creates a swf payload for CVE-2018-15982, which is based off of the PoC from https://github.com/smgorelik/Windows-RCE-exploits. The vulnerability was discovered by Chenming Xu and Ed Miles of Gigamon ATR. The vulnerability is a use-after-free flaw enabling...

EUVD-2026-92323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.2...