374 matches found
CVE-2015-3306
CVE-2015-3306 ProFTPD Exploit This repository contains a Python proof-of-concept PoC exploit for CVE-2015-3306 ⚠️ Warning: Only use this against systems you own or have explicit permission to test. Unauthorized exploitation is illegal. Author Mohamed EL-KHAROUATI Part 1: CVE-2015-3306 ProFTPD...
CVE-2026-31431-Linux-Copy-Fail
🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...
CVE-2015-3306
CVE-2015-3306 This contains single-file exploit for ProFTPd 1.3.5 modcopy CVE-2015-3306 vulnerability, especially for TryHackMe Kenobi Lab. Vulnerability Description CVE-2015-3306 is a vulnerability found in ProFTPd 1.3.5 due to a flaw in the modcopy module, which is responsible for enabling FTP...
CVE-2018-0952-SystemCollector
SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...
CVE-2020-17518
Apache Flink directory traversal vulnerability, allows remote file read/write via REST API Vulnerability ID: CVE-2020-17518 Vulnerability Description: CVE-2020-17518: Write remote files via REST API Affected Versions: Flink 1.5.1-1.11.2 Safe Versions: Flink 1.11.3 or Flink 1.12.0 Flink 1.5.1...
tscopy
TScopy 업데이트 2022-03-31 TScopy 소개 사고 대응IR 업무 중에는 파일시스템의 파일을 분석할 수 있는 능력이 필수적입니다. 때때로 이러한 파일은 사용 중이기 때문에 운영 체제OS에 의해 잠겨 있으며, 특히 이벤트 로그와 레지스트리 하이브의 경우 더욱 frustrating 합니다. TScopy는 관리자 권한으로 실행하는 사용자가 파일시스템에서 원시 위치를 파싱하여 OS에 요청하지 않고 잠긴 파일에 접근하고 복사할 수 있게 해줍니다. 유사한 기능을 수행하는 다른 도구로는 RawCopy가 있으며, 우리는 이를 사...
CVE-2015-3306-Home-Lab
ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...
PT-2026-104519
Name of the Vulnerable Software and Affected Versions MPG WordPress plugin versions prior to 4.2.3 Description Insufficient validation of the dataset source during project import allows users with the Editor role and above to specify a local filesystem path instead of a remote URL. This leads to ...
OpenVAS-Vulnerability-Analysis-Incident-Response-Report
OpenVAS 脆弱性分析・インシデント対応レポート 現実世界シミュレーション: FTP サービスの悪用 ProFTPD CVE-2015-3306 現実世界シミュレーション: FTP サービスの悪用 ProFTPD CVE-2015-3306 📌 概要 このプロジェクトは、管理されたラボ環境で OpenVAS（Greenbone Vulnerability Manager） を使用した、脆弱性評価とインシデント対応の完全なサイクルワークフローを示しています。 当初の目的は、既知のFTP脆弱性（ vsftpd バックドア...
CVE-2019-12815
CVE-2019-12815 ProFTPd modcopy - arbitrary file copy without authentication mass scanner...
exploit-CVE-2015-3306
ProFTPd 1.3.5 - modcopy リモートコマンド実行 ProFTPD は、Unix および Unix 系オペレーティングシステム向けの、高度に設定可能な FTP デーモンです。ProFTPD は、セキュアで設定可能な FTP サーバーへの欲求から生まれました。Apache Web サーバーへの深い賞賛に触発されています。他のほとんどの Unix FTP サーバーとは異なり、旧来の BSD ftpd コードベースから派生したものではなく、完全に新しい設計と実装です。 脆弱な環境 テスト用に脆弱な環境をセットアップするには、Docker...
OnlyOffice-path-traversal
ONLYOFFICE Path Traversal Exploit CVE-2023-46988 📌 Overview This script exploits a path traversal vulnerability in ONLYOFFICE Document Server CVE-2023-46988 that allows unauthorized users to copy arbitrary files from the server. The vulnerability exists in the /example/editor endpoint, where the...
cve-2015-3306-lab
CVE-2015-3306 — ProFTPD modcopy Pre-Auth Arbitrary File Copy A fully reproducible lab and a hand-written exploit for CVE-2015-3306 — built as a learning exercise in vulnerability research: patch diffing, manual triggering, and raw-socket exploit development. The bug ProFTPD's modcopy module...
cpx_proftpd
cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...
Astra Linux – Vulnerability in ffmpeg
Before ffmpeg version 4.3, the tty demuxer did not have a ‘readprobe’ function assigned to it. By creating a legitimate “ffconcat” file that references an image, followed by a file that triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim as long ...
Astra Linux – Vulnerability in Grunt
The file.copy operations in GruntJS are vulnerable to a TOCTOU race condition, which can lead to arbitrary file writes in the GitHub repository gruntjs/grunt before version 1.5.3. This vulnerability allows for arbitrary file writes that can lead to local privilege escalation to the GruntJS user...
DEBIAN-CVE-2026-89704
In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop nfsdcopyfilerange samples dst-fwberr into "since" after the copy loop, then uses it to detect writeback errors via filemapcheckwberr once vfsfsyncrange returns. Because t...
UBUNTU-CVE-2026-89704
In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop nfsdcopyfilerange samples dst-fwberr into "since" after the copy loop, then uses it to detect writeback errors via filemapcheckwberr once vfsfsyncrange returns. Because t...
CVE-2026-89704 nfsd: sample writeback error cursor before async COPY loop
In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop nfsdcopyfilerange samples dst-fwberr into "since" after the copy loop, then uses it to detect writeback errors via filemapcheckwberr once vfsfsyncrange returns. Because t...
