EUVD-2026-89018

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

CVE-2026-101112

The Joomla Extension - balbooa.com - Balbooa Forms version

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

CVE-2026-100287

In Devolutions Server version 2026.3.5.0 and earlier, a missing authorization flaw in the attachment history API allows an authenticated low-privileged user to permanently delete or restore vault attachments. An attacker can achieve this by sending a crafted API request . No specific exploit link...

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

xll_windows_reverse_shell

xllwindowsreverseshell xll shell inversa de Windows En tu máquina atacante Kali: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Actualiza el revsh.ps1 2. crea un servidor HTTP de Python python3 -m http.server 9999 En tu máquina atacante Windows: 1. Mueve notpadXLL.c a tu...

CVE-2026-48939

CVE-2026-48939 — Exploit de RCE en iCagenda Joomla Subida de archivos arbitraria sin autenticación → Ejecución de código PHP Resumen CVE-2026-48939 es una vulnerabilidad crítica con CVSS 10.0 en la extensión de calendario de eventos iCagenda para Joomla. La función de adjuntar archivos del...

netfence

Netfence Like Envoy xDS, but for eBPF filters. Netfence runs as a daemon on your VM/container hosts and automatically injects eBPF filter programs into cgroups and network interfaces, with a built-in DNS server that resolves allowed domains and populates the IP allowlist. Netfence daemons can be...

CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...

CVE-2023-47504-POC

CVE-2023-47504 POC Exploit for CVE-2023-47504. According to NIST, this vulnerability should allow unauthenticated users to access functionalities in the Elementor Website Builder Plugin. Based on my research into the vulnerability, and also judging by the URL from Patchstack that describes the...

CVE-2024-39929

Exim CVE-2024-39929 Exploit PoC Este repositorio contiene un script de prueba de concepto PoC para explotar la vulnerabilidad de Exim CVE-2024-39929. La vulnerabilidad afecta a las versiones de Exim anteriores a la 4.98, lo que permite a los atacantes eludir los mecanismos de bloqueo de extension...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

WP Attachment Export < 0.2.4 - Unrestricted File Download

The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed ...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

CVE-2026-34213

CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Intro I identified, responsibly disclosed, and reproduced a High-severity authorization flaw in Docmost , the...

dapr

driver-attack-platform Antecedentes: https://github.com/nccgroup/dapr/wiki requisitos previos Una versión relativamente reciente de nodejs probada con la versión v11.4.0 Si se apunta a un escritorio Linux y se usa NVM para gestionar la instalación de nodejs, ejecuta estos comandos para permitir...

CVE-2026-101071

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2025-65318-and-CVE-2025-65319

PoC para CVE-2025-65318 y CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: Al utilizar la funcionalidad de interacción con archivos adjuntos, Canary Mail 5.1.40 y versiones anteriores guarda documentos en un sistema de archivos sin una etiqueta Mark-of-the-Web, lo que permite a los atacantes omitir...