SIMATIC RTLS Locating Manager Code Execution

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

BackupOperatorToDA

From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo

🔐 OAuth Security Laboratory: CVE-2025-4679 Educational Simulator A safe, isolated environment to learn about OAuth vulnerabilities without risking real systems 🚀 Quick Start | 📚 Learning Path | 🛡️ Safe Environment | 👥 Contributors 📖 Overview This educational laboratory simulates the CVE-2025-4679...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview Property|...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538 is an Insecure Direct Object Reference IDOR in vulnerability found in Hitachi NAS' HNAS' System Management Unit SMU Configuration Backup & Restore functionality. This vulnerability affects SMU versions prior to 14.8.7825.01. Exploitation This exploit requires the...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

CVE-2023-27532

CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the vulnerability and exploitation please read the Rapid7 AttackerKB Analysis. Building Open in Visual Studio. You will nee...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

LGPwn

LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...

Le Panthéon de la Souveraineté

🏠 Developed on: GitLab · 🪞 Mirror: GitHub · 🌐 Website: pantheon-souverainete.eu 🏛️ The Pantheon of Sovereignty A 100% sovereign, redundant and secure cloud infrastructure, designed to break free entirely from the GAFAM. Version 2.1.0-alpha — Full structural overhaul. Starting from scratch. 📋 Table...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

iPhoneRestrictionsPasscodeBF

iPhoneRestrictionsPasscodeBF The iPhoneRestrictionsPasscodeBFTool searches for an iPhone backup of any iOS version inside a Windows machine, if it exists, the tool will search inside de backup for the Restriction Passcode. The Restriction Passcode is a 4 digit password that is used in iPhone...

restic

Introduction restic is a backup program that is fast, efficient and secure. It supports the three major operating systems Linux, macOS, Windows and a few smaller ones FreeBSD, OpenBSD. For detailed usage and installation instructions check out the documentation. You can ask questions in our...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE Verification Environment This repository is for actually verifying two CVEs reported for nginx-ui Nginx's Web GUI management tool in a Docker environment. CVE-2026-42221 : Unauthenticated administrator account takeover CVE-2026-42238 : Command execution via unauthenticated backup...