0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 Únete a t.me/SpiderzTM Dorks de Shodan y FOFA Usa los siguientes dorks para encontrar sistemas potencialmente vulnerables: Dorks de Shodan: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 Dorks de FOFA: app="Toshiba-e-Studio" title="Toshiba...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Uso Ejecuta el script con root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Notas de uso del paquete de materiales complementarios de «Seguridad 0day: Tecnología de análisis de vulnerabilidades de software segunda edición» Los materiales incluidos en el paquete se proporcionan únicamente con fines de aprendizaje...

Serein

Serein | En el atardecer de lluvia | Este proyecto está en pausa Linux English version is online! | ¡Ya está disponible la versión en inglés de Linux! http://github.com/W01fh4cker/SereinLinux Declaration | Declaración Este proyecto está destinado solo para uso autorizado. Prohibido su uso para...

AMSI-Bypass

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que todos los rehenes sean liberados y regresen a casa sanos y salvos. Puedes ayudar a traerlos de vuelta a...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft todos los productos exploit 0day https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html sin write-up leer: PHP Upload Handler de jQuery File Upload...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

ShieldCrash

ShieldCrash Windows Defender 0day Vulnerability Microsoft has failed to properly patch ShieldBreak CVE-2026-69414, under specific conditions it is still possible to trigger the exact same problem that was caused by ShieldBreak. While Microsoft fixed several things to prevent re-exploiting the...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...

GreenSection

GreenSection Nvidia GreenSection 内存损坏 0day 漏洞 多个 NVIDIA 用户模式组件在 \BaseNamedObjects\52813408-3561-4705-820a-2b3b78be92ba 中共享一个全局内存段，所有用户对该段均拥有完全读写权限。该段内部存储了重要的数据结构，但在执行时会进行检查以防止出现问题。 不幸的是，该段中的相同数据在运行时被重复使用，导致越界内存写入。 虽然此漏洞不会立即获得 SYSTEM 权限，但它可以轻松地跨用户边界使用，甚至可能危及 dwm.exe...

0day-Rubbish batch-8-2026-08

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

EUVD-2025-16726

Malicious code in bioql PyPI...

PT-2025-32196 · Aomei · Aomei Backupper Workstation

Name of the Vulnerable Software and Affected Versions: AOMEI Backupper Workstation affected versions not specified Description: A local privilege escalation issue exists in AOMEI Backupper Workstation due to a link following flaw. This allows an attacker to gain elevated privileges on a compromis...

PT-2025-24328

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpD...

CVE-2025-5495

A vulnerability was found in Netgear WNR614 1.1.0.281.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2025-5495

Affected product: Netgear WNR614 router (version 1.1.0.28 1.0.1WW). Vulnerable component: URL Handler. Root cause: manipulation of the input %00currentsetting.htm appended to a URL leads to improper authentication. Impact: remote attacker could bypass authentication, compromising confidentiality,...

Ivanti EPMM Hit by Two Actively Exploited 0day Vulnerabilities

Ivanti EPMM users urgently need to patch against actively exploited 0day vulnerabilities CVE-2025-4427, CVE-2025-4428 that enable pre-authenticated remote…...

Linux kernel versions 6.8. Local Privilege Escalation 0day Exploit

...

Samsung Internet Browser SOP Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...