CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Ejecución Remota de Código RCE Prueba de Concepto Más información: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

pypacker

一般信息 这是 Pypacker：Python 中最快、最简单的底层数据包操作库。 参见下面的示例，了解您可以用它做什么。 如果您想支持此项目，可以通过 PayPal 进行捐赠。 使用 Pypacker 可以做什么 通过关键字或原始字节创建自定义数据包，并通过 Python 读取/更改其数据：examples/createpackets.py 从 pcap 文件读取/写入数据包（仅支持 Wireshark/tcpdump pcap 格式）：examples/pcapreadwrite.py 将多个 pcap 文件合并为一个文件。尝试读取损坏的 pcap...

EUVD-2026-70823

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB...

citrix_cve-2023-4966

citrixcve-2023-4966 Citrix CVE-2023-4966 来自 assetnote，修改以支持并行和文件处理...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - 强大的系统访问，如此简单 📦 概述 你好，朋友。该工具为 CheckMK CVE-2024-0670 解锁高级访问权限。它利用薄弱的文件处理机制来获取 SYSTEM 权限。该软件包含一项专门的持久化功能。它使用 C++ 开发，旨在为用户提供在 Windows 环境中进行有效权限提升所需的工具。 🛠️ 功能特性 高级 LPE ：通过已识别的漏洞获取 SYSTEM 访问权限。 持久化模块 ：即使系统重启后仍能维持访问。 用户友好界面 ：专为易用性而设计，即使是非技术用户也能轻松上手。 兼容性 ：适用于 Windows...

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

CVE-2026-20841-PoC

CVE-2026-20841-PoC CVE-2026-20841 的概念验证（PoC） CVE-2026-20841 – 详细信息 CVE-2026-20841 是一个影响 Microsoft 记事本（Notepad）的漏洞，特制的输入可触发意外的命令执行。 该问题源于对某些文件内容或执行引用的不当处理。当用户在记事本中打开或与特制文件交互时，可能允许执行系统命令，例如 cmd.exe、powershell.exe 或其他二进制文件。 基本信息 CVE ID：CVE-2026-20841 受影响组件：Microsoft 记事本（Notepad） 漏洞类型：命令执行...

CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 使用文件...

CVE-2023-40028

Prueba de Concepto PoC para CVE-2023-40028 CVE-2023-40028 es una vulnerabilidad en Ghost CMS que permite la lectura arbitraria de archivos mediante un manejo inadecuado de archivos. Esta PoC demuestra cómo funciona el exploit en condiciones controladas. Solo con fines educativos. Referencia:...

CVE-2026-73720 Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox anterior a 7.0.16 es vulnerable a una escalada de privilegios local mediante el seguimiento de enlaces simbólicos que conduce a la eliminación arbitraria de archivos y al movimiento arbitrario de archivos. VirtualBox intenta mover archivos de registro como NT...

ALSA-2026:61623 Moderate: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: gzip: Arbitrary file overwrite via insecure...

USN-8680-1: FFmpeg vulnerabilities

Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-70628 Adrian Junge discovered that FFmpeg incorrectly handled certain video files. An attacker could possibly u...

EUVD-2026-45030

Whistle vulnerable to path traversal...

USN-8671-1: FFmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

USN-8671-1 ffmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...

Astra Linux – Vulnerability in open-vm-tools

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...