pmp-exploit

pmp-exploit Este exploit aprovecha la vulnerabilidad de escalada de privilegios encontrada en Password Manager Pro para elevar a un usuario normal a SuperAdmin y luego descargar las contraseñas y archivos almacenados en la aplicación. Sistemas Afectados Producto : ManageEngine Password Manager Pr...

Oracle-Identity-Manager-CVE-2025-61757

Herramienta de detección de vulnerabilidades CVE-2025-61757 para Oracle Identity Manager v2.2 🔥 Contexto de la vulnerabilidad Recientemente, Oracle Identity Manager ha revelado una grave vulnerabilidad de ejecución remota de código CVE-2025-61757. Esta vulnerabilidad se debe a un manejo inadecuad...

JavaPayload

JavaPayload JavaPayload es una colección de payloads Java puros para usar en la post-explotación desde exploits Java puros o desde configuraciones incorrectas comunes como el administrador de Tomcat sin protección por contraseña o el puerto del depurador. La documentación desactualizada se puede...

CVE-2022-22954

Análisis de CVE-2022-22954 Resumen Workspace ONE Access modelo de provisión de espacio de trabajo como servicio ofrece autenticación multifactor, inicio de sesión único y acceso condicional para SaaS, aplicaciones web y móviles. CVE-2022-22954 es una vulnerabilidad de Server-side Template Injecti...

CVE-2024-30051

CVE-2024-30051 — EoP por desbordamiento de heap del DWM de Windows · Investigación de Tesis de Máster -orange Desbordamiento de búfer basado en heap en el Administrador de ventanas de escritorio de Windows dwmcore.dll Escalada de privilegios local → nivel de integridad SYSTEM a través del proceso...

CVE-2025-56399

CVE-2025-56399 – Ejecución remota de código autenticada en laravel-file-manager v3.3.1 🧭 Resumen Una vulnerabilidad de ejecución remota de código RCE autenticada en laravel-file-manager v3.3.1 y versiones anteriores permite a los atacantes con acceso a la interfaz del administrador de archivos...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Cadena de explotación de prueba de concepto que he descubierto y que ha sido asignada como CVE-2026-47301 para Microsoft Configuration Manager SCCM, combinando control de acceso roto, escritura arbitraria de archivos mediante salto de ruta de...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticated authentication bypass caused by improper handling of URL encoding CWE-177 in the API session management layer. A crafted request reaches a privileged endpoint and is treated as an authenticated admin session. Overview The vulnerabilit...

The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-97283: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

PT-2026-104781

Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: from n/a through 7.4.5...

PT-2026-104788

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1...