pypacker

Общая информация Это Pypacker: самая быстрая и простая библиотека для работы с пакетами низкого уровня на Python. Примеры использования см. ниже. Если вы хотите поддержать этот проект, вы можете через PayPal. Что можно делать с Pypacker Создавать собственные пакеты с помощью ключевых слов или из...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - Contournement de chemin WinRAR - Exécution de code à distance RCE Preuve de Concept Plus d'informations : https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/...

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

citrix_cve-2023-4966

citrixcve-2023-4966 Citrix CVE-2023-4966 d'assetnote modifié pour la gestion parallèle et de fichiers...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE — Мощный доступ к системе стал простым 📦 Обзор Привет, друг. Этот инструмент открывает расширенный доступ к CheckMK CVE-2024-0670. Он использует слабую обработку файлов для получения поддержки SYSTEM. Программа включает специализированный модуль сохранения...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Доказательство концепции для CVE-2026-20841 CVE-2026-20841 – Подробности CVE-2026-20841 — это уязвимость, затрагивающая Microsoft Notepad, где специально созданный ввод может вызвать непреднамеренное выполнение команд. Проблема возникает из-за некорректной обработки определённо...

CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 utilise le fichier...

CVE-2023-40028

Preuve de concept PoC pour CVE-2023-40028 CVE-2023-40028 est une vulnérabilité dans Ghost CMS qui permet des lectures arbitraires de fichiers via une gestion incorrecte des fichiers. Ce PoC montre comment l'exploit fonctionne dans des conditions contrôlées. Usage éducatif uniquement. Référence :...

AlmaLinux 9.2 [TuxCare] Security Update: open-vm-tools / open-vm-tools-desktop / open-vm-tools-devel / etc (ALMALINUX9.2:CLSA-2025:1751133361)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751133361 advisory. - VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tampe...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox до версии 7.0.16 уязвим для локального повышения привилегий через переход по символическим ссылкам, что приводит к произвольному удалению файлов и произвольному перемещению файлов. VirtualBox пытается перемещать файлы журналов как NT AUTHORITY\SYSTEM в...

The vulnerability of the get_page_template() function in the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the getpagetemplate function in the WordPress content management system is related to improper handling of file names for PHP functions like include or require. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-25265

Privilege escalation due to weak configuration while temporary file handling...

PT-2026-96106

MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP did not properly verify that the uploaded content was actually XML. Because of this, a user with permission to modify...

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through hook file handling. An attacker can access or manipulate files outside the hooks directory by supplying a hook filename containing directory-escape sequences such as ../ when editing or removing a hook. This...

CVE-2026-81927: Improper Neutralization of Input During Web Page Generation

Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potentially harmful elements" mode concrete.filemanager.images.svgsanitization.action = reject, uploaded SVGs were checked...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...