QuickHeal

QuickHeal CVE-2017-5005 para Quick Heal Antivirus Aviso Restricción incorrecta de operaciones dentro de los límites de un búfer de memoria. El software realiza operaciones sobre un búfer de memoria, pero puede leer o escribir en una ubicación de memoria que está fuera del límite previsto del búfe...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG...

CVE-2019-1218

CVE-2019-1218 Outlook iOS Spoofing Vulnerability I discovered XSS in IOS Outlook Mobile Application. A severe vulnerability in Microsoft Outlook for IOS that could allow an attacker to takeover a victim’s device. The security issue could enable a malicious actor to execute a cross-site scripting...

CVE-2025-63588

CVE-2025-63588 Reflected Cross-Site Scripting XSS in CMSimpleXH cmsimplexh path handling Estimated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Medium Assigned CVE: CVE-2025-63588 Products: CMSimpleXH - 1.8 Vendor: CMSimpleXH - https://www.cmsimple-xh.org/ Summary A reflected Cross-Site...

cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...

CVE-2019-11932

CVE-2019-11932 How a double-free bug in WhatsApp turns to RCE I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244...

KeePwn

A python script to help red teamers discover KeePass instances and extract secrets. Features KeePass Discovery Look for KeePass installation files through SMB C$ share. Accept multiple target sources IP, CIDR, hostname, file. Check for KeePass metadata version, last access time. Check for running...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 Herramienta de detección de vulnerabilidades Resumen El 20200706, se filtró en línea una vulnerabilidad RCE en la interfaz de administración de tráfico TMUI de F5 BIG-IP. El componente TMUI Interfaz de usuario de gestión de tráfico de F5 BIG-IP tiene una vulnerabilidad...

EUVD-2026-80041

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboottimerset.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

email-header-analyzer

E-Mail Header Analyzer MHA What is E-Mail header analyzer MHA: E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can: Identify hop delays. Identify the source of the email. Identify hop country. MHA is an...

snakeyaml_cve_poc

snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...

Goreport

Goreport v3.0, a Gophish Reporting Tool This script accepts your Gophish campaign IDs as a parameter and then collects the campaign results to present the statistics and perform user-agent parsing and geolocation lookups for IP addresses. Goreport generates lists of IP addresses, operating system...

WhoamiAlternatives

Alternatives to whoami Some experiments to retrieve the current username without calling whoami.exe or similar binaries. Method 1: PRTLUSERPROCESSPARAMETERS Get the environment variables from the PEB structure and parse it to find the username. Function NtQueryInformationProcess returns a...

andriller

Andriller CE Community Edition Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices. It has features, such as powerful Lockscreen cracking for Pattern, PIN code, or Password...

CVE-2025-22131-PoC

CVE-2025-22131-PoC PoC for CVE-2025-22131 PhpSpreadsheet is a library written in pure PHP and offers a set of classes that allow you to read and write various spreadsheet file formats such as Excel and LibreOffice Calc. phpspreadsheet version =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets =...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC Este script de prueba de concepto demuestra cómo explotar CVE-2024-4323, una vulnerabilidad de corrupción de memoria en Fluent Bit que permite la ejecución remota de código. CVE-2024-4323 es una vulnerabilidad de corrupción de memoria en las versiones 2.0.7 hasta 3.0.3 d...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2014-4481

CoreGraphics CCITT Memory Corruption - CVE-2014-4481 Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary...

laf

LoRaWAN Auditing Framework - ALPHA VERSION IoT deployments just keep growing and one part of that significant grow is composed of millions of LPWAN low-power wide-area network sensors deployed at hundreds of cities Smart Cities around the world, also at industries and homes. One of the most used...

libxml2-exploit

libxml2-exploit An example exploit for CVE-2017-7376 Install Download this repo and a vulnerable version of libxml2, e.g. v2.7.7: root@kitploit: git clone https://github.com/brahmstaedt/libxml2-exploit.git cd libxml2-exploit wget https://github.com/GNOME/libxml2/archive/v2.7.7.zip unzip v2.7.7.zi...