POC-CVE-2025-24104-Py

PoC: Exfiltración de Archivos en iOS vía Manipulación de Backup ADVERTENCIA MUY IMPORTANTE: ESTE SOFTWARE ES UNA PRUEBA DE CONCEPTO PoC CON FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD ÚNICAMENTE. NO UTILICES este script en dispositivos para los que no tengas consentimiento explícito y por...

CVE-2024-21754-Forti-RCE

FortiOS and FortiProxy Password Hashing Vulnerability to RCE CVE-2024-21754 Overview A critical vulnerability, classified as CVE-2024-21754, has been identified in FortiOS and FortiProxy versions up to 7.4.3, 7.2, 7.0, 6.4, and 2.0. This vulnerability, categorized under CWE-916, involves the use ...

VeeamDumper-BOF

Veeam Dumper BOF A credential extraction BOF for Veeam Backup and Replication and Veeam One by Stephen Munro and Logan Kroeger from @MWRCyberSec. The BOF needs to be executed in an Admin beacon on either a Veeam One or Veeam Backup and Replication server and supports Cobalt Strike and Outflank C2...

CVE-2024-40711-Exp

Usages .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp, --targetveeamport=VALUE The target Veeam...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

ohmybackup

ohmybackup ohmybackup - Escanea Directorios de Backup de la Víctima y Archivos de Backup ohmybackup Escanea carpetas de backup en sitios objetivo. Busca archivos archivados en las carpetas que encuentra. Con el sistema de escaneo de 2 archivos, añade extensiones y nombres de archivo de diferentes...

Malicious code in wallet-backup-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452fd8e20feb6485c920b8c91f3d1f87c8bcd9f51ac9f4c57329ed9e2b20b37 The gem's native extension build script extconf.rb, which executes automatically on gem install, contains a base64-encoded Ruby payload that is eval'...

reload.sh

reload.sh No lo hagas... Por favor, no lo ejecutes en sistemas en vivo ej. producción ni en tu computadora personal donde almacenas datos críticos. Esta receta te muestra cómo instalar un sistema limpio donde otro sistema ya existe y está funcionando. ¡Es realmente genial y asombroso, pero muy...

CVE-2023-6553-PoC

CVE-2023-6553 PoC LFI to RCE Unauthenticated Remote Code Execution in Backup Migration WordPress Plugin. Run $ python exploit.py The following PHP script is executed. out.txt; ? References Critical Unauthenticated Remote Code Execution Found in Backup Migration Plugin...

CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

drs-malware-scan

Análisis de escaneo de malware en servidores on-premises utilizando servicios de AWS Desafíos de la detección de malware en entornos on-premises Para los equipos de seguridad, puede ser difícil monitorear continuamente todos los servidores on-premises debido a restricciones presupuestarias y de...

dumper

Acerca de Dumper Esta es una utilidad de línea de comandos para crear copias de seguridad de bases de datos de varios tipos con configuración flexible de conexión y almacenamiento. Oportunidades: Se pueden gestionar múltiples sistemas de bases de datos. Soporta PostgreSQL , MySQL , MongoDB y etc...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

android-backup-extractor

Android backup extractor Utilidad para extraer y reempaquetar respaldos de Android creados con adb backup ICS+. Basado en gran parte en BackupManagerService.java de AOSP. Construcción Requiere Java 11. El manejo de respaldos cifrados requiere la política de jurisdicción de fuerza ilimitada de JCE...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker backs up BitLocker recovery keys and audits CVE-2026-45585 on Windows 10/11. yellowkey github search lands here. Portable CLI + GUI for volumes you administer. What's new in v2.2 September 27, 2026 Faster volume enumeration CSV/JSON/XML export encoding fix...

restic

Introduction restic is a backup program that is fast, efficient and secure. It supports the three major operating systems Linux, macOS, Windows and a few smaller ones FreeBSD, OpenBSD. For detailed usage and installation instructions check out the documentation. You can ask questions in our...

CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

ATutor-Instructor-Backup-Arbitrary-File

ATutor - Exploit de copia de seguridad del instructor Título del exploit: ATutor 2.2.4 'Backup' - Ejecución remota de comandos CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Fecha: 5/13/2019 Autor del exploit: liquidsky Joseph McPeters Página oficial del proveedor: https://atutor.github.io/...

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Prueba de Concepto PoC Descripción Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-6972. La vulnerabilidad permite la eliminación arbitraria de archivos sin autenticación AFD en el plugin de migración de respaldo de Wordpress Nota: Un análisis técnico...