CVE-2017-14980

CVE-2017-14980 SyncBreeze version 10.0.28 CVE-2017-14980 Buffer overflow exploitation...

CVE-2025-55182

CVE-2025-55182 POC This repository contains a proof of concept POC for CVE-2025-55182, demonstrating the vulnerability and its exploitation. Weak server "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , Weak server 2 "dependencies": "next": "^15.0.0", "react": "^19.0.0"...

Evasor

Resumen Evasor es una herramienta automatizada de evaluación de seguridad que localiza ejecutables existentes en el sistema operativo Windows que pueden usarse para eludir cualquier regla de Control de Aplicaciones. Es muy fácil de usar, rápida, ahorra tiempo y está totalmente automatizada,...

SharpADWS

SharpADWS 中文文档 Reconocimiento y explotación de Active Directory para equipos rojos a través de los Servicios Web de Active Directory ADWS. Resumen SharpADWS es una herramienta de reconocimiento y explotación de Active Directory para equipos rojos que recopila y modifica datos de Active Directory...

mtkclient

Langue : 🇺🇸 🇨🇳 MTKClient Un outil mtk pour l'exploitation, la lecture/écriture de la mémoire flash et d'autres trucs fous. Sous Windows, vous devez installer le port mtk standard et le pilote usbdk voir les instructions ci-dessous. Sous Linux, un noyau patché n'est nécessaire que lors de...

enumdb

enumdb Enumdb es una herramienta de fuerza bruta y post-explotación para bases de datos relacionales MySQL y MSSQL. Cuando se proporciona una lista de nombres de usuario y/o contraseñas, recorre cada host buscando credenciales válidas. De forma predeterminada, enumdb utiliza las credenciales reci...

CVE-2026-107125 XnView Classic FLI File heap-based overflow

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument startingline causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address...

CVE-2026-107125 XnView Classic FLI File heap-based overflow

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument startingline causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address...

EUVD-2026-94360

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument startingline causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability...

RomBuster

RomBuster RomBuster es una herramienta de explotación de routers que permite revelar la contraseña de administrador del router de red. Características Explota vulnerabilidades en los routers más populares como D-Link, Zyxel, TP-Link, Cisco y Huawei. Optimizado para explotar múltiples routers a la...

CVE-2020-6308-mass-exploiter

CVE-2020-6308-mass-exploiter CVE-2020-6308 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

commix

Commix abréviation de command injection exploiter est un outil open source de test d'intrusion, écrit par Anastasios Stasinopoulos @ancst, qui automatise la détection et l'exploitation des vulnérabilités de type command injection. Vous pouvez consulter la collection de captures d'écran présentant...

asrockploit

arbitrary code execution with CVE-2020-15368...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

PickleC2

PickleC2 PickleC2 es un framework de post-explotación y movimientos laterales Documentación ReadTheDocs Resumen PickleC2 es un framework C2 simple escrito en python3 utilizado para ayudar a la comunidad de Penetration Testers en sus compromisos de red teaming. PickleC2 tiene la capacidad de...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - develоpe mode: 08.10.2022 NOTE: This is only for testing and you can open just a calculator, the integrated program of Microsoft. = Or you can use the PDF file to download the calc.exe into a forbidden directory :D WARNING! Only for tests and education =...

pwninit

pwninit Инструмент для автоматизации подготовки к решению задач на эксплуатацию бинарных уязвимостей Возможности Делает бинарный файл задания исполняемым Скачивает линкер ld-linux.so., способный загрузить предоставленный libc без segmentation fault Скачивает отладочные символы и снимает strip с...

CVE-2020-14883EXP

CVE-2020-14883EXP Used for verifying and exploiting WebLogic 10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0. Do not use for illegal purposes. Enter IP+port to start verification e.g. 127.0.0.1:7001 Supports remote XML command execution Versions other than 10.3.6.0.0 provide two...