EUVD-2026-101529

Appium: Symlink based Zip Slip in @appium/support ZIP extraction...

CrabCrypt

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CrabCrypt🦀🔐 CrabCrypt is a secure file encryption tool with GUI, designed for effortlessly encrypting and decrypting any file. With AES encryption and a sleek Tkinter interface, CrabCrypt ensures your files remain...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

CVE-2021-22204

Vulnerable Version 7.44 12.23 Reproduce $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Reference NVD-CVE-2021-22204...

EUVD-2026-97760

copyparty FTP: upload outside defined volumes limited path traversal...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand the meaning of the word "file extension " before watching the following tutorial. If you don't understand, please first search for "how to change file extension" If it's still MP4 after changing the extension, that...

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit cd slipit python3 setup.py sdist pip3 install --user dis...

CVE-2025-34085-Multi-target

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...

EUVD-2026-101285

YOURLS: Unauthenticated File Inclusion...

YOURLS: Unauthenticated File Inclusion

Summary YOURLS versions ≤1.10.4 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server without any credentials. Details The vulnerability exists because YOURLS uses URL sanitization functions yourlssanitizeurl,...

OneNoteAnalyzer

OneNoteAnalyzer A C based tool for analyzing malicious OneNote documents Description Recently we came across few malicious OneNote Documents been distributed in-the-wild by various threat actors. This gave us an idea to develop "OneNoteAnalyzer" which would help in analysing such malicious OneNot...

borg extract might modify out-of-tree files when extracting maliciously crafted archives

Impact A maliciously crafted archive could contain a symlink e.g. "evil" - "/etc" followed by an item below it "evil/passwd", or an item whose path embeds ".." e.g. "a/../../etc/passwd". When extracting such items, borg followed the symlink / resolved the "..", so it could delete or overwrite fil...

Nemesis

Overview Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis with humans and AI of files collected during offensive security assessments. Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

IRFuzz

IRFuzz - Simple Scanner with Yara Rules IRFuzz is a simple scanner with yara rules for document archives or any files. Install 1. Prerequisites Linux or OS X Yara: just use the latest release source code, compile and install it or install it via pip install yara-python Yara Rules - You may...

CVE-2020-11579

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition MySQL database is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server. A remote attacker can read any file on a remote victim host with web-server privileges e.g. www-data, via a single HTTP GET request. Re...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

gortex-PoC

Symlink Following in Indexer File-Walk → Out-of-Repo Content Disclosure via searchtext CVE status: requested, pending assignment. This finding is published as GHSA-6vhf-4wcm-2r83. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-gortex-PoC and this banner is replaced with the CVE link....