CVE-2020-1066-EXP

Riferimento Questa vulnerabilità è una vulnerabilità di elevazione dei privilegi locali causata dalla sostituzione arbitraria di file dovuta alla gestione non corretta degli oggetti di collegamento simbolico da parte del servizio Windows CardSpace. Dichiarazione Il POC dell'autore è solo a scopo ...

TeleShadow2

TeleShadow 2 Teleshadow2- Hijacker avanzato di sessioni di Telegram Desktop! Rubare le sessioni di Telegram Desktop non è mai stato così facile! Imposta i dettagli dell'email e del mittente e del destinatario, oppure usa l'API di Telegram! e invialo alla vittima dopo la compilazione. Come si usa ...

o365-attack-toolkit

Cos'è o365-attack-toolkit o365-attack-toolkit consente agli operatori di eseguire attacchi di phishing OAuth. Abbiamo deciso di passare dal vecchio modello di definizioni statiche a un modello completamente "interattivo" con l'account in tempo reale. Alcuni dei cambiamenti Ricerca interattiva del...

dirtycow-replacer

PER FAVORE NOTA CHE NON STO TESTANDO FORMALMENTE QUESTO CODICE È IN FASE DI PROGETTAZIONE COME STRUMENTO EDUCATIVO Cosa fa? android-dirtycow-replacer usa l'exploit dirtycow CVE-2016-5195 per patchare un elenco di oltre 1000 file. Puoi modificarlo per arrivare a 10000, ma 1000 dovrebbero bastare...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Installation TrollStore AltStore Danksagungen https://github.com/zhuowei/MacDirtyCow MacDirtyCow-Exploit https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

SetupHijack

SetupHijack Aperçu SetupHijack est un outil de recherche en sécurité qui exploite des conditions de concurrence et une gestion non sécurisée des fichiers dans les processus d'installation et de mise à jour de Windows. Il cible les scénarios où des installateurs ou programmes de mise à jour...

CVE-2017-4490-

CVE-2017-4490 لقد أجريت بعض التجارب ونجحت في استغلال ملف .basgrc المتخصص في الكتابة والتزيين على الطرفية. أنشأت ثغرة في ملف .bashrc ونجحت في تعطيل الطرفية. الثغرة موجودة لدي وتعمل على جميع أنظمة لينكس لأن figlet يعمل على جميع الأنظمة. فقط اكتب الأمر apt-get install figlet وسيُنشئ لك .bashrc في Ho...

CVE-2024-10449-patch

Patch per CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Passaggi: Scarica il file loginAction.php corretto da questo repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php e sostituisci la versione vulnerabile con questo. Modific...

sudo_digest_toctou_poc_CVE-2015-8239

POC TOCTOU do DigestSpec do sudoers Justificativa Alyssa Milburn https://twitter.com/noopwafel descobriu um bug de condição de corrida TOCTOU no sudo quando a configuração DigestSpec é usada. A configuração DigestSpec pode ser usada para permitir que um usuário execute sudo em um binário se, e...

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

EUVD-2026-50946

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

CVE-2026-16727

CVE-2026-16727 describes a race condition in ASUS Armoury Crate caused by Concurrent Execution using a shared resource due to improper synchronization. The vulnerability allows a local user to replace a crafted file and achieve arbitrary code execution with elevated privileges. Affected product: ...

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...

CVE-2026-50148

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a malicious one. Honeywell also recommends...

CVE-2026-13742

CVE-2026-13742 affects Honeywell IQ MultiAccess, all versions prior to and including 28. The root cause is improper digital signature verification, enabling an attacker with local access and low privileges (no user interaction) to have a downloaded file replaced with a malicious one. CVSS metrics...

CVE-2026-44469

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before...