CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Cadena de escalada de privilegios solo con script usando CVE-2025-6019 y UDisks2 sin incluir imagen de sistema de archivos. Créditos, Contexto y Cadena de Explotación Este repositorio no introduce una nueva vulnerabilidad. La técnica de escalada de privilegios...

SharpZipRunner

SharpZipRunner Executes position independent shellcode from an encrypted zip Get PIC code from your assembly either by using donut or metasploit or cobaltstrike RAW format. zip the .bin file and encrypt it with a password, this assembly decrypts the zip entry in memory and executes it using...

CVE-2024-10914

cve-2024-10914 Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 Code execution Proof of Concept Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys The buffer overflow vulnerability was found in the "/userfs/bin/tcapi" binary which is used as a wrapper for the "Diagnostics"...

CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914 is a critical vulnerability affecting the D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L up to version 20241028. The function cgiuseradd in the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd is the culprit, allowing attackers to inject operating system command...

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

Mandating-Honeypots-Project

Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - Exploit de Ejecución Remota de Código RCE en D-Link Descripción Este repositorio contiene un exploit para CVE-2024-3273 , una vulnerabilidad crítica encontrada en dispositivos específicos de D-Link que permite la Ejecución Remota de Código RCE. La vulnerabilidad surge de una...

CVE-2024-33111

CVE-2024-33111 Los routers D-Link DIR-845L con versión 1.01KRb03 e inferiores son vulnerables a Cross Site Scripting XSS a través de /htdocs/webinc/js/bscsmsinbox.php. Componente vulnerable /htdocs/webinc/js/bscsmsinbox.php Detalles técnicos La vulnerabilidad se debe a la falta de filtrado en el...

CVE-2023-33781

CVE-2023-33781 Description D-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality. Proof of concept...

D-Link DSL 2888a - Authentication Bypass/Remote Command Execution

D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55 are vulnerable to authentication bypass issues which can lead to remote command execution. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality. id: CVE-2020-24579 info: name: D-Li...

D-Link DIR-610 Devices - Information Disclosure

D-Link DIR-610 devices allow information disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZEDGROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. id: CVE-2020-9376 info: name: D-Link DIR-610 Devices - Information Disclosure author:...

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

D-Link DIR-600M - Authentication Bypass

D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. id: CVE-2019-13101 info: name: D-Link DIR-600M - Authentication...

CVE-2024-57376

CVE-2024-57376 Exploit de ejecución remota de código sin autenticación para D-Link DSR-250 y DSR-250N Aviso de seguridad: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Uso root@kitploit: $ python3 exploit.py usage: Ejemplo root@kitploit: $ python3 exploit.py...

CVE-2023-4542

poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...

CVE-2024-3273

CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2024-10914

POC - CVE-2024–10914- Vulnerabilidad de Inyección de Comandos en el parámetro name para D-Link NAS Resumen Se encontró una vulnerabilidad en D-Link DNS-320, DNS-320LW, DNS-325 y DNS-340L hasta 20241028. Ha sido declarada como crítica. Afectada por esta vulnerabilidad es la función cgiuseradd del...

Get-PDInvokeImports

Get-PDInvokeImports Description: Get-PDInvokeImports is tool PowerShell module which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke usage in assembly. Showing all locations from where they are referenced and Exports all to DnSpyBookmarks.xml This PS module could...