RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

toastnotify-bof

toastnotify-bof A Beacon Object File BOF for sending Windows toast notifications. Pairs with the blog post for full context and use cases. subcommands getaumid Enumerates AUMIDs Application User Model IDs registered on the system. Use this to find a suitable identity to borrow before sending a...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

execute-assembly-pico

Execute Assembly PICO A PICO for Crystal Palace that implements native CLR hosting to execute an appended .NET assembly in memory, using the same technique as the donut shellcode generator. This allows you to load .NET tools like Rubeus or Seatbelt from position-independent code without dropping...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

CVE-2022-39196-

CVE-2022-39196 Black board CMS Escalation of Privileges Blackboard Learn version 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Additional Information Step 1: Use a student...

ADSearch

ADSearch A tool written for cobalt-strike's execute-assembly command that allows for more efficent querying of AD. Key Features List all Domain Admins Custom LDAP Search Connect to LDAPS Servers Output JSON data from AD instances Retrieve custom attributes from a generic query i.e. All computers...

CVE-2018-17961

build the image run the container with port forwarding ssh -X into it run evince executeonlybypass.ps check exploit has written into /.bashrc...

CVE-2026-102638

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...

CVE-2026-102637

The Autodesk Fusion desktop application is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input in the documentName parameter of a Fusion protocol URL. When a user invokes a maliciously crafted protocol URL, the application may execute an HTML payload, potent...

CVE-2026-102636 Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or...

Vicon Valerus unauthenticated command injection RCE

Unauthenticated POST to /NVR/api/v1/upgrades/multiformat-file-Execute/start with a JSON-encoded command string triggers OS command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Vicon Valerus unauthenticated command injection RCE.""" from future import annotations import json import re...

JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw

JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw """JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw""" from future import annotations from kittysploit import from http.server...

CVE-2025-9223

Applications Manager - Execute Program Action Bypass PoC 📖 Description This repository contains a Proof of Concept PoC that demonstrates a command execution vulnerability in the "Execute Program Action" feature of ManageEngine Applications Manager. 🔍 Vulnerability Details Applications Manager use...

mooSocial v.3.1.8 - Cross-Site Scripting

Cross-Site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function. id: CVE-2023-44813 info: name: mooSocial v.3.1.8 - Cross-Site Scripting author: ritikchaddha severity:...

VvvebJs < 1.7.5 - Arbitrary File Upload

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php. id: CVE-2024-29272 info: name: VvvebJs 1.7.5 - Arbitrary File Upload author: s4e-...

Jan v0.4.12 - Arbitrary File Upload

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-36858 info: name: Jan v0.4.12 - Arbitrary File Upload author: pussycat0x severity: critical description: | An arbitrar...

PT-2026-126649

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or...

PT-2026-126428

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute tool in kali gpt/tools/mcp server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...