44915 matches found
Keycloak < 24.0.5 - Broken Access Control
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...
CVE-2024-56071
π¨ Simple Dashboard = 2.0 - Unauthenticated Privilege Escalation π Description The Simple Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an...
NetRipper
Description NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after...
CVE-2023-29343
CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
BLE-Replay
BLE-Replay BLE-Replay is a Bluetooth Low Energy BLE peripheral assessment tool. It pulls/consumes Bluetooth HCI logs from your mobile device and extracts all of the writes that the central makes to a peripheral. This data can be replayed using most Bluetooth dongles from a Linux host, or saved to...
sweyntooth_bluetooth_low_energy_attacks
SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...
HosTaGe
HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Aalborg University Denmark and Technische UniversitΓ€t Darmstadt Germany HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most...
TruffleSnout
TruffleSnout Iterative AD discovery toolkit for offensive operators. Situational awareness and targeted low noise enumeration. Preference for OpSec. Discover: Forests and Trusts Domains and Trusts GCs/DCs Search and Query AD: For objects and data Limits to avoid triggering defensive circuit...
CVE-2026-101755
A flaw was found in MySQL client programs. An authenticated attacker with network access and low privileges could exploit this vulnerability across multiple protocols. A successful attack allows the threat actor to cause an application hang or repeated crash, resulting in a complete Denial of...
CVE-2024-22120-RCE-with-gopher
Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hostid: 10107 PHP...
CVE-2021-44852
CVE-2021-44852 An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code...
meshtastic-cve-2025-52464-poc
Meshtastic CVE-2025-52464 Proof of Concept Overview This project is a software-only proof of concept demonstrating CVE-2025-52464 , a vulnerability affecting Meshtastic firmware versions 2.5.0 to 2.6.10. The implementation reproduces the cryptographic behaviour of the vulnerable firmware and...
BloodfangC2
Bloodfang is a modern implant with position independent code that compiles to 64 & 32 bit Windows systems. Compiled implant shellcode is about 6 KB Kilobytes. Its execution in memory has very little footprint. Props to: https://5pider.net/blog/2024/01/27/modern-shellcode-implant-design That said;...
CVE-2026-5173
π¦ CVE-2026-5173: GitLab WebSocket Unauthorized Method Execution PoC π οΈ Overview CVE-2026-5173 allows a low-privileged authenticated attacker to call restricted backend methods through GitLab's WebSocket /-/cable endpoint, specifically via the GraphqlChannel. This can lead to sensitive data exposur...
CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment
CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...
Shelltropy
Shelltropy The more predictable you are, the less you get detected A technique of hiding malicious shellcode based on low-entropy via Shannon encoding. Entropy is the measure of the randomness in a set of data here: shellcode. The higher the entropy, the more random the data is. Shannon Entropy i...
ble_proxy
BLE HTTP Proxy System A Bluetooth Low Energy BLE based HTTP proxy system that routes web browser traffic through an iOS device. This allows web browsing through the iOS device's internet connection using BLE as the transport layer. Architecture Overview Browser β Windows Proxy β BLE/TCP β iOS/Moc...
CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication
CVE-2026-22017 β Firmware Update via BLE Without Authentication Program Code Python bleak peripheral blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself: self.firmwareda...
privilege-escalation-breach
Security breach project - Privilege escalation The vulnerability is in Oracle Solaris, a product of Oracle Systems component: XScreenSaver. The supported version that is affected is 11. It's an easily exploitable vulnerability which allows low privileged attackers with logon to the infrastructure...