Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared A Rust Proof of Concept. Read more on my blog, all original research by CrowdStrike, this is just the POC for it! Unless I am blind; there does not seem to be much out there POC's etc relating to the discovery made by CrowdStrike researchers, called Vectored...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

VectoredOverloading

VectoredOverloading Vectored Overloading is a local PE injection technique that was first observed in the KidKadi malware. It works by manipulating the load of a legitimate DLL using Hardware Breakpoints HWBP and Vectored Exception Handling VEH to change the DLL section object on-the-fly...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls is a 2 part novel project consisting of argument spoofing and syscall retrival which both abuse EH in order to subvert EDRs. This project consists of both of these projects in order to provide an alternative solution to direct syscalls. Tampering with syscalls...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Vulnerabilidad de Bypass de Autenticación en Apache Tomcat Resumen CVE-2024-52316 es una vulnerabilidad de bypass de autenticación identificada en Apache Tomcat. Este problema surge cuando Tomcat está configurado con un componente ServerAuthContext...

ShellGhost

ShellGhost Una técnica de evasión basada en memoria que hace que el shellcode sea invisible desde el inicio hasta el final del proceso. Motivación Quería compartir esta POC de autoinyección de shellcode para mostrar algunos conceptos de evasión de AV/EDR que pueden ser útiles para Red Teaming. Ha...

instrumentation_callbacks

instrumentationcallbacks Los callbacks de instrumentación son una parte bastante divertida y no documentada de Windows. Todo el código en este repositorio se publica bajo la licencia MIT. Este repositorio utiliza el espaciado de C++ al estilo de Google. Las PRs son bienvenidas si encuentras...

CVE-2026-90440

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in progess Target is...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialization during Apache Dubbo Hessian2 Exception Handling CVE-2021-43297 1. Import the two projects into two separate IDEA instances 2. First run org.apache.dubbo.samples.basic.BasicProvidermain to start the server 3. Then run org.apache.dubbo.samples.basic.BasicConsumermain to start the...

ROS-20261001-73-0047

The vulnerability in rclone is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Descripción Es posible realizar un ataque RCE con un valor malicioso de Content-Type. Si el valor de Content-Type no es válido, se lanza una excepción que luego se utiliza para mostrar un mensaje de error a un usuario. Versiones afectadas Struts 2.3.5 Struts 2.3.31...

EUVD-2026-88176

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to improper exception handling in the process of converting message properties from AMQP 1.0 to AMQP 0-10. An attacker can disrupt message delivery to AMQP 0-10 consumers by sending specially crafted message...

CVE-2026-10751

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CVE-2026-10751

IBM MQ Java and JMS client libraries are vulnerable to remote code execution via a deserialization filter bypass in exception handling (CWE-502). An authenticated attacker can execute arbitrary code on client applications. The CVSS 3.1 base score is 7.5 (HIGH) , with a high attack complexity and ...

CVE-2026-61822: Improper Check or Handling of Exceptional Conditions

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance handles exceptions outside the loop that processes rows from partconfig, so an exception for one partition set immediately terminates the loop and skips every later set. A role with...

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...