CVE-2018-6574

CVE-2018-6574 POC POC de exploit para CVE-2018-6574 Compilar 1. Crea un archivo de exploit con lo siguiente: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Compílalo: gcc -shared -o exploit.so -fPIC exploit.c 3. Finalmente, necesitas el código Go qu...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen-API-Handbuch und Quellcode-Build-Handbuch: https://intelxed.github.io Fehler: https://github.com/intelxed/xed/issues/new Abgekürzte GITHUB -Build-Anleitung: git clone https://github.com/intelxed/xed.git xed git clone...

libpeconv

libPeConv Una libreria per caricare e manipolare file PE. Obiettivi L'obiettivo di libPEConv era quello di creare un "coltellino svizzero" per il caricamento personalizzato di file PE. Raccoglie varie funzioni di supporto che puoi integrare rapidamente nel tuo loader personale. Ad esempio:...

xori

Xori - Marco de desensamblado personalizado Xori es una librería de desensamblado y análisis estático preparada para automatización que consume shellcode o binarios PE y proporciona datos de análisis de triage. Agradecimientos: Xori no existiría sin la inspiración e ideas de la comunidad de códig...

Apache-Commons-Text-CVE-2022-42889

Apache Commons Text CVE-2022-42889 Resumen Apache Text4Shell CVE-2022-42889 Las versiones afectadas de Apache Commons Text son de la 1.5 a la 1.9 y se ha parcheado en la versión 1.10. Apache Commons Text es una biblioteca Java descrita como "una biblioteca centrada en algoritmos que trabajan con...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

beagle

Beagle 1. Acerca de Beagle 2. Instalación 1. Docker 2. Paquete Python 3. Configuración 3. Interfaz web 1. Subir datos 2. Navegar por grafos existentes 3. Interfaz de grafo 1. Inspeccionar nodos y aristas 2. Expandir vecinos 3. Ocultar nodos 4. Ejecutar mutadores 5. Alternar tipos de nodos y arist...

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...

Php-mod/curl Library <2.3.2 - Cross-Site Scripting

Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...

MicroStrategy Library <11.1.3 - Cross-Site Scripting

MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

Slims9 Bulian 9.4.2 - SQL Injection

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. id: CVE-2021-45793 info: name: Slims9 Bulian 9.4.2 - SQL Injection author: nblirwn severity: high description: | Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data c...

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

SAS/Internet 9.4 1520 - Local File Inclusion

SAS/Internet 9.4 build 1520 and earlier allows local file inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...

Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion

A vulnerability in the Wordpress Media-Library-Assistant plugins in version 3.09 is vulnerable to a local file inclusion which leading to RCE on default Imagegick installation/configuration. id: CVE-2023-4634 info: name: Media Library Assistant 3.09 - Remote Code Execution/Local File Inclusion...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. id: CVE-2020-11732 info: name: Media Library Assistant 2.82 -...

boringssl

BoringSSL BoringSSL è un fork di OpenSSL progettato per soddisfare le esigenze di Google. Anche se BoringSSL è un progetto open source, non è pensato per l'uso generale, come lo è OpenSSL. Non consigliamo a terze parti di farne affidamento. Farlo probabilmente sarà frustrante perché non ci sono...

rustls

Rustls è una moderna libreria TLS scritta in Rust. Stato Rustls è usato in produzione in molte organizzazioni e progetti. Miriamo a mantenere una ragionevole stabilità della superficie API, ma l'API potrebbe evolversi man mano che apportiamo modifiche per introdurre nuove funzionalità o...

Blackbone

Blackbone Biblioteca de hacking de memoria de Windows Características Compatibilidad con x86 y x64 Interacción con procesos Gestionar PEB32/PEB64 Gestionar procesos a través de la barrera WOW64 Memoria de procesos Asignar y liberar memoria virtual Cambiar la protección de memoria Leer/Escribir...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 expuso una puerta trasera en la biblioteca de compresión XZ, permitiendo acceso SSH remoto al omitir la autenticación. Es un ataque importante a la cadena de suministro que afecta a sistemas Linux, destacando los riesgos en componentes confiables de código abierto. La...

CVE-2025-24071

CVE-2025-24071: Vulnerabilidad de Suplantación del Explorador de Archivos de Microsoft Windows script de SilentExploit 📖 Descripción Este proyecto detecta y demuestra la explotación de una vulnerabilidad de suplantación del Explorador de Archivos de Windows. El problema surge de un archivo de...