479630 matches found
Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...
Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
Windows Update Elevation of Privilege Vulnerability
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
Windows Projected File System Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2025-55188-7z-exploit
CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...
CVE-2019-19576
class.upload.php = 2.0.3 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.3 Tested on newly installed Ubuntu 19.10 with PHP7.3 and Apache/2.4.38 Specifically Debian/Ubuntu has been found to be vulnerable since they add the php,...
CVE-2026-48282-coldfusion-rds-detection
CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection Laboratory validation of CVE-2026-48282 in Adobe ColdFusion Remote Development Services RDS, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in whi...
phpcms-2008-CVE-2018-19127
phpcms-2008-CVE-2018-19127 Recently we found a vulnerability in /type.php of phpcms 2008 source code. When attackers send crafted requests like "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", evil content in this case "@unlinkFILE;assert$POST1;" will be written into cache file in this...
CVE-2022-44268
CVE-2022-44268 🧙♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Upload poisoned PNG image. Check if...
wordpress-rce-vapt-cve-2020-25213
WordPress RCE Exploitation & Mitigation CVE-2020-25213 📌 Project Overview This project was developed as part of the IE4012 – Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...
hashdeep
This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...