CVE-2024-24816

CVE-2024-24816 CKEditor 4 XSS This issue was caused by a lack of sanitization of the data passed to "preview" feature. This problem has been fixed in CKEditor 4 at version 4.24.0-lts. Affected versions 4.24.0-lts Advisory Update CKEditor 4 to version 4.24.0-lts or newer...

agent-skills

Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

CVE-2025-24054

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure 🎥 Demonstration POC + March 2025 Patch bypass 🎥 patch bypass Click the image above to watch the vulnerability demonstration 📋 Technical Overview This repository provides a comprehensive research framework analyzing the vulnerability chai...

fbht

FBHT Facebook Hacking Tool Python - -version 2.7.3 Windows/Linux IMPORTS Selenium Matplotlib-1.2.1 Networkx-1.8.1 Numpy-1.7.1 Pygraphviz-1.1 Simplejson-3.3.0 Mechanize-0.2.5 Other: gephi-0.8.2-beta Graphs software Recomendation: Use setuptools for the dependencies S.O Working on Windows 7 64/32...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 PoC del exploit de vista previa de PDF de GhostScript Este exploit apunta a CVE-2019-14811 en entornos GS donde la salida PostScript no se refleja, pero sí se ejecuta, como en vistas previas de PDF mediante imágenes png. El exploit renderiza comandos directamente en la vista previa...

sandbox-runtime

Anthropic Sandbox Runtime srt Una herramienta de sandboxing ligera para aplicar restricciones de sistema de archivos y red a procesos arbitrarios a nivel del sistema operativo, sin necesidad de un contenedor. srt utiliza primitivas nativas de sandboxing del sistema operativo sandbox-exec en macOS...

LiveHiddenCamera

Live Hidden Camera Live Hidden Camera LHC is a library which record live video and audio from Android device without displaying a preview. Motivation I'm working on a research based Android Malware and decided to create a multi function RAT Remote Administration Tool. I was working on Live Stream...

AgentCyTE

CORE TopoGen Genera topologías de red CORE reproducibles a partir de archivos XML de escenarios mediante una GUI web completa o una interfaz de línea de comandos. Tabla de contenidos Aspectos destacados Capturas de pantalla Inicio rápido Requisitos previos Instalar dependencias Iniciar la interfa...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG...

CVE-2022-45025

CVE-2022-45025 Inyección de comandos a través de la importación de PDF en Markdown Preview Enhanced VSCode, Atom Descripción La librería de herramientas Markdown Mume era vulnerable a inyección de comandos debido al uso del comando spawn con la opción shell: true. Esto podría permitir a un atacan...

noia

Noia Noia es una herramienta basada en web cuyo objetivo principal es facilitar el proceso de exploración del sandbox de aplicaciones móviles y la previsualización directa de bases de datos SQLite, imágenes y más. Desarrollada con frida.re. Ten en cuenta que no soy programador, pero probablemente...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure...

CVE-2021-40444

CVE-2021-40444 totalmente armamentizado Generador de docx malicioso para explotar CVE-2021-40444 Ejecución remota de código en Microsoft Office Word, funciona con archivos DLL arbitrarios. Actualización 31/05/2022 - CVE-2022-30190 - Follina Ahora el generador puede crear el documento necesario pa...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote cod...

CVE-2023-29839

Vulnerabilidad de Cross Site Scripting Almacenado en Hotel Druid 3.0.4 - CVE-2023-29839 Enlace del CMS: https://www.hoteldruid.com/ Versión afectada: 3.0.4 Gravedad y CVSS: 5.4 Media | Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Existe una vulnerabilidad de Cross Site Scripting XSS...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

ttddbg

ttddbg - Plugin de Time Travel Debugging para IDA ⚠️ Atención usuarios de IDA 8: usar ttddbg con IDA 8 requiere una solución temporal por el momento, consulteProblemas conocidos Este plugin añade un nuevo depurador a IDA que permite cargar trazas de Time Travel Debugging generadas con WinDBG...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS in Preview functionality in Amasty Blog Pro for Magento 2 Description The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by...

CVE-2026-90561

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...