exploit_laravel_cve-2018-15133

CVE-2018-15133 대상 Laravel 익스플로잇 이 코드는 CVE-2018-15133 취약점을 익스플로잇하며, kosmiz의 PoC와 이 취약점에 대한 Metasploit 익스플로잇을 기반으로 합니다. 저는 주로 Hack The Box의 머신을 위해 이 코드를 작성했습니다. 당시 Metasploit을 사용하고 싶지 않았고, Python 연습 핑계도 필요했기 때문입니다. CVE 설명: Laravel Framework 5.5.40 이하 및 5.6.x 5.6.29 이하 버전에서 잠재적으로 신뢰할 수 없는 X-XSRF-TOK...

cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

cisco7crack

cisco7crack 시스코 enable 7 비밀번호를 암호화 및 복호화합니다...

tp-link-decrypt

참고: 2025년 10월 5일 현재 이 프로젝트는 더 이상 사용되지 않습니다. Nate Robbins님이 친절하게 인수하여 스위치 복호화 기능을 추가했습니다 - https://github.com/robbins/tp-link-decrypt ====================================================================================================== 이 도구가 유용하다고 생각되면 [email protected] 또는 GitHub로 알려주세요 : 1...

DEBIAN-CVE-2026-107705

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-107705

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-107705

The Poppler library, versions 0.42.0 through 26.10.0 , is vulnerable to a stack-based buffer overflow within the Decrypt::revision6Hash() function. An attacker who controls the password of an AESV3/R6 encrypted PDF can provide a password exceeding 127 bytes, leading to an overflow of the K1 and E...

EUVD-2026-95208

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-107705 Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-39324

CVE-2026-39324 익스플로잇 PoC Rack::Session::Cookie 복호화 실패 시 암호화되지 않은 쿠키를 수락하는 폴백 발생 | ---|--- 권고| GHSA-33qg-7wpp-89cq 패키지| rack-session RubyGems 영향 범위| = 2.1.1 패치 버전| 2.1.2 요약 secrets: 옵션을 사용하는 Rack::Session::Cookie는 암호화된 쿠키만 수락해야 합니다. 그러나 복호화에 실패하면 쿠키를 거부하지 않고 기본 Base64::Marshal 코더로 폴백합니다. 공격자는 일반...

Exploit-CVE-2026-1357

의존성 설치 pip3 install pycryptodome requests 기본 익스플로잇 python3 wpvivi.py http://target.com 커스텀 웹셸 python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" 기술적 설명: Null Byte Key: RSA 복호화가 실패하면 false를 반환하며, phpseclib는 이를 "\x00\x00\x00"으로 처리합니다. AES-128 ECB...

Lab-for-cve-2018-15133

Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...

CVE-2026-85422

A vulnerability in Brocade ASCG version before 3.5.0 allows an attacker to obtain a static cryptographic key hardcoded into the software binaries. This key is used to secure sensitive data at rest and protect inter-node communication protocols. An attacker successfully extracting this key can dec...

PT-2026-107853

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...

CVE-2026-107214 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

CVE-2026-107214

The Excelize Go language library (versions 2.3.1 to 2.11.0 ) contains a vulnerability where the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors process attacker-controlled values. Specifically, EncryptionInfo and EncryptedPackage ...

CVE-2026-107214 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

EUVD-2026-94317

Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine th...

PT-2026-107438

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In sol pdu decrypt, out is allocated as NET BUF SIMPLE17 and then filled with net buf...