CVE-2018-0952-SystemCollector

SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

CVE-2025-39401

CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...

CVE-2023-31711

CVE-2023-31711 Incorrect Access Control in ZKTECO allows remote attackers to read any file via the administrative API. Installing required modules Inside the directory ZKTEco: $ pip install -r ./pyzatt/requirementsdev.txt Running the exploit Inside the directory ZKTEco: $ python exploit.py...

CVE-2025-505050

CVE-2025- Des: unauthinticated access to uploaded files POC: navigate to any uploaded file it will be accesed without login Discovered by Aljohara Abdulmohsen Alsubaie...

CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

CVE-2025-34085-Multi-target

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...

security-research

Security Research A collection of files related to my personal security research. Additional content will be posted on my blog https://blog.mirch.io. Tools Tool| Description ---|--- openssldircheck| Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in...

CVE-2019-13272

This repository does not have a README...

magento-upload-auto-submit-zoneh

magento-upload-auto-submit-zoneh CVE-2025-54236 ⚠️ DISCLAIMER ⚠️ CRITICAL WARNING! This tool was created exclusively for: ✅ Educational purposes and security research ✅ Authorized penetration testing ✅ Security assessments on systems you own ✅ Vulnerability verification with written permission...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

HackBar

HackBar Burpsuite Plugin Usage Requirements Burpsuite How to Install Download Latest Jar from https://github.com/d3vilbug/HackBar/releases/ and add in burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS Upcoming Features/Modules Ctrl + H shortcut WAF bypass SQLi Decoder/Encoder Greets...

struts_cve-2024-53677

Proof-of-Concept Setup test environment » git clone [email protected]:0xPThree/strutscve-2024-53677.git » cd strutscve-2024-53677 » sudo docker build --ulimit nofile=122880:122880 -m 3G -t struts-6.3.0.1 . » sudo docker run -p 8081:8080 --ulimit nofile=122880:122880 -m 3G --rm -it --name...

scalpel

As of 6/27/2013 Scalpel has been released under the Apache 2.0 License and the source is available at The Sleuth Kit github repository. It is not being actively maintained. The Autopsy team started to do work on it to integrate tightly into via Java/JNI bindings, but ran into several memory leaks...

CVE-2025-13407

CVE-2025-13407 GravityForms 2.9.23.1 - Unauthenticated Arbitrary File Upload TELEGRAM GROUP ADRESS: https://t.me/toolsandpoc...

CVE-2006-3392

CVE-2006-3392 About the vulnerability A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to...

CVE-2021-43798

CVE-2021-43798 1. Summary Grafana is an open-source platform that supports data monitoring and management. In the versions listed below, a Path Traversal vulnerability exists that allows manipulation of file paths using special characters such as ../. 8.0.0 and above, below 8.0.7 8.1.0 and above,...

Weblate-CVE-2026-24126

Weblate — Arbitrary File Read via SSH Host Argument Injection Discovered by: Alejandro Baño · January 2026 Acknowledged by: Weblate 5.16 release notes Overview Weblate's SSH host key management endpoint passes the host parameter supplied by an authenticated administrator directly tossh-keyscan...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: now lets do it...

CVE-2022-3656

Imperva Red Team recently revealed a vulnerability called CVE-2022-3656 that affects more than 2.5 billion users of Google Chrome and Chromium-based browsers. This vulnerability allows the theft of sensitive files, such as encrypted wallets and cloud provider credentials. Vulnerability...