rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Prueba de concepto de eliminación arbitraria de archivos ★ Descripción CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p Ejemplo python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test pytho...

CVE-2017-3000

CVE-2017-3000 Un exploit completo de CVE-2017-3000 en Flash Player Constant Blinding PRNG Inserta WANG y wang en el heap de código generado dinámicamente al final...

CVE-2018-15982

Créditos @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Descripción Script de Aggressor para lanzar un ataque driveby de Internet Explorer mediante el exploit CVE-2018-15982 para Flash player. Versiones de producto afectadas Adobe Flas...

CVE-2018-4878

Autor y Créditos Autor: Vincent Yiu @vysecurity Créditos: @evi1cg: Ayudándome a probar y mantener mi motivación @smgoreli: PoC original de Calc.exe @kbandla: Él lo sabe, y yo lo sé. ; Descargo de responsabilidad Desarrollado para fomentar más desarrollo de scripts Aggressor. ¡Úselo solo en prueba...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 Este script crea un payload swf para CVE-2018-15982, basado en el PoC de https://github.com/smgorelik/Windows-RCE-exploits. La vulnerabilidad fue descubierta por Chenming Xu y Ed Miles de Gigamon ATR. La vulnerabilidad es un fallo de use-after-free que permite la...

WordPress CP Media Player plugin < 1.3.4 - Contributor+ Media Player Settings Update vulnerability

Contributor+ Media Player Settings Update vulnerability discovered by Ryan Fabella in WordPress Plugin CP Media Player versions 1.3.4...

CVE-2026-104678

The CP Media Player WordPress plugin (versions before 1.3.4 ) is vulnerable to an improper access control flaw in its settings-page handler . Due to a lack of capability checks, users with only Contributor-level access can perform actions reserved for administrators, such as creating, modifying, ...

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

EUVD-2026-94183

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

yamaha-smaf-player

Yamaha SMAF 播放器 C++ 作者：Akustikrausch Andreas Wendorf 一个小型、无依赖的 Yamaha SMAF 铃声播放器 .mmf，使用 C++ 编写。你只需给它一个那些曾在 2004 年让你的三星、夏普或松下手机发出“滴滴滴滴”声的文件，它就能为你输出清晰的立体声音频。无需手机、无需固件、无需采样 ROM。只有 FM 芯片，在软件中重建。 这是一个几乎没人愿意用开放代码保存的整整十年的声音。数以百万计的这种文件仍在流传，而 从来没人完成过一个开源的播放器 ：尝试在 2004 年就停滞了，或者绕过了合成器本身。所以，这里有一个 C++...

cve-2015-0313

CVE-2015-0313 Código fuente de la vulnerabilidad de Adobe Flash cve-2015-0313 del Angler Exploit Kit Referencia: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

JoomSport <= 5.7.7 - SQL Injection

The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

DLL_Injection_On_VLC

Inyección de DLL y CVE-2010-3124 Descripción general 🌱 Este proyecto explora el tema de la inyección de DLL Dynamic Link Library y se centra específicamente en el CVE-2010-3124. CVE-2010-3124 se refiere a una vulnerabilidad de ruta de búsqueda no confiable encontrada en VLC Media Player versión...

USN-8885-1 fluidsynth vulnerabilities

It was discovered that FluidSynth did not properly validate the channel argument of the pitchbendrange command. A remote attacker could possibly use this issue to cause FluidSynth to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-58264 It was discovered that FluidSyn...