481530 matches found
Check-Point_poc
Check-Pointpoc Check-Point Security Gateway Arbitrary File Read Vulnerability CVE-2024-24919 python Check-Pointpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--'...
DumpSMBShare
A python script to dump files and folders remotely from a Windows SMB share. Features Only list shares with --list-shares. Select only files with given extensions with --extensions or all files. Choose the local folder to dump to with --dump-dir. Select base folder to search from in the share wit...
Driver-hide-file
hide-file choose and hide windows files/path from kernel space using this driver...
CVE-2023-21752
CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...
CVE-2026-111802
A flaw in Nautilus allows for arbitrary file deletion due to improper link resolution (CWE-59 ). When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash but fails to verify if the trash directory paths are symbolic links . An attacker can exploit...
CVE-2026-111802 Nautilus: nautilus: arbitrary file deletion via trash symlink
A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage...
CVE-2026-110606
A flaw was found in libdxfrw. An out-of-bounds read vulnerability occurs when parsing drawing DWG files due to improper handling of non-null-terminated buffers in the file header reader. By convincing a user to open a specially crafted DWG file, an attacker could trigger an application crash,...
CVE-2026-111163
A flaw was found in wildmidi. An attacker can exploit this vulnerability by supplying a specially crafted HMI audio file to be processed by an application using the library. Due to insufficient boundary checks in the WMParseNewHmi function, the application attempts to read memory beyond the...
CVE-2024-51788
š CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload šØ Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...
CVE-2026-110716
A flaw was found in unshield. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the application. By tricking a user or system into processing a specially crafted InstallShield cabinet file with manipulated header offsets or file counts, an attacker can trigger an...
CVE-2023-1177-PoC-reproduce
MLflow CVE-2023-1177 - PoC & Reproduce This repository contains Proof-of-Concept PoC exploit code and instructions to reproduce the Local File Inclusion LFI vulnerability in MLflow, identified as CVE-2023-1177. Vulnerability Information: CVE ID: CVE-2023-1177 Vulnerability Type: Local File...
dark-doh
dark-doh.exe public version Purpose: Download files via DoH, or download and execute a shellcode not implemented in the public version Run example: dark-doh.exe file1 download google yourdomain.com The supporting python script for DNS zone generation added py-prepzones.py. !!! Disclaimer !!! The...
truehunter
Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...
CVE-2026-62438
A flaw in GIMP allows an attacker to cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by tricking a user into opening or previewing a specially crafted Bohemia Interactive (PAA) texture file . The root cause is an integer overflow during image dimension calculatio...
CVE-2026-62438 Gimp: gimp: paa integer overflow out-of-bounds read
A flaw was found in GIMP. An attacker can cause a Denial of Service DoS or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive PAA texture file. Due to an integer overflow when calculating image dimensions during file...
CVE-2026-11613
CVE-2026-11613 ā Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium ā bukan di wordpress.org SVN Affected| semua versi = 5.1.2 lab memakai 3.1.8.4 dari mirror Patched| 5.1.3 11/08/2026 Tipe| CWE-98 ā PHP Local File Inclusion, unauthenticated CVSS| 9.8 Critical...
CVE-2026-70190
A flaw was found in .NET. An authorized local attacker can exploit improper file link resolution before file access to achieve privilege escalation. By convincing a user to interact with a crafted file or link, the attacker can manipulate file paths to gain elevated privileges on the system...
CVE-2017-8759
Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...
CVE-2026-62439 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR .pvr file, an attacker can trigger a heap-based buffer overflow, potentially leading to...
CVE-2026-62439
A flaw in GIMP 's file-pvr plug-in allows an integer overflow when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow , potentially leading to arbitrary c...