CVE-2026-85706

CVE-2026-85706: GitLab CE/EE Unauthenticated Path Traversal CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Component : GitLab CE/EE Repository Commits API Workhorse body-upload variant Affected : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Fixed : 19.1.8 / 19.2.6 ...

RazerEoP

RazerEoP PoC for arbitrary file delete/move in Razer Synapse 3 Macro module. This module allows user to export created macros to file on disk and file operation is done via razer service that runs as nt authority\system. I tried to report this to razer using their BB program and i got response th...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...

BlackHat-Europe-2022

BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Abstract Static code review is an effective way to discover vulnerability variants and exploitation primitives, but two of the most challenging tasks for static analysis are the effective code pattern extraction from hu...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

dismap

🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

exe2powershell

exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...

CVE-2022-3368

CVE-2022-3368 PoC for arbitrary file move vulnerability in Software Update component of Avira Security. Users have option to use this feature to update any outdated software on their PC ,when this feature is used Avira Security service will drop downloaded files in...

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

CVE-2020-9934

CVE-2020-9934 This Proof of Concept is a simple Swift program that will give itself and Terminal every kTCCService entitlement pulled from tccd and then do four things: Create a file named "" in the TCC-protected directory Read the data from said file from within the TCC-protected directory List...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

Combined-Wordlists

Combined-Wordlists A combined wordlists for files and directory discovery current count TBE: 4,510,964 This a combined wordlist of: nullenc0de Jason Haddix Seclists Web Content web-fuzz-wordlist Predrag Cujanović Nahamsec dirb wordlist dirbuster wordlist Download Here Sorted and compile into one...

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...

CVE-2024-34102

CVE-2024-34102 POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce. Overview This POC will attempt to read files from target hosts that are vulnerable to the recent Magento / Adobe Commerce CVE-2024-34102. This POC is based on this security advisory...

CVE-2018-20463

CVE-2018-20463 There is a security vulnerability in WordPress JSmol2WP Plugin version 1.07. Attackers can exploit this vulnerability to read arbitrary files. Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file...