43284 matches found
CVE-2025-61301
CVE-2025-61301 - CAPEv2: Denial-Of-Analysis via Recursive Process Forking Description A High-Severity Denial-of-analysis vulnerability affects reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or...
patriot
Patriot مشروع بحثي صغير لاكتشاف أنواع مختلفة من تقنيات التخفي في الذاكرة. قم بتنزيل أحدث إصدار هنا. يدعم الإصدار الحالي عمليات الكشف التالية: هياكل CONTEXT مشبوهة تشير إلى دوال VirtualProtect. يستهدف بحثًا من تأليف Austin Hudson Foliage وEkko من تأليف Cracked5pider. التحقق من رؤوس MZ/PE في الذاكر...
EUVD-2026-95099
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.toweb and clai web development chat server does not validate the Host header, allowing a website visited by a developer to use DNS rebinding to reach a...
xspawn
xspawn xspawn starts a program on macOS through launchd and never execs that program itself. The aim is that an EDR records launchd as the parent, not this tool or the calling shell. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/xspawn Summary xspawn opens...
cve-2026-13934
CVE-2026-13934 This is the work project repository. Investigation, analysis, work, and reports are handled in one repo D088/D091. This file is the repository/board entry document. For the full folder and artifact conventions, see docs/conventions.md. The body status, conclusions, links is updated...
azazel
Azazel V 0.1 पूरी पृथ्वी उन कार्यों के माध्यम से भ्रष्ट हो गई है जो अज़ाज़ेल द्वारा सिखाए गए थे: उसे सभी पापों का श्रेय दो। -- 1 हनोक 2:8 Azazel एक यूज़रलैंड रूटकिट है जो मूल LDPRELOAD तकनीक पर आधारित है, जो Jynx रूटकिट से ली गई है। यह अधिक मजबूत है और इसमें अतिरिक्त सुविधाएँ हैं, और यह मुख्य रूप...
clrinject
clrinject किसी अन्य प्रक्रिया के CLR रनटाइम और AppDomain में C EXE या DLL असेंबली को इंजेक्ट करता है। इंजेक्ट की गई असेंबली फिर इंजेक्टी प्रक्रिया के क्लासेज के स्थैतिक इंस्टेंस तक पहुँच सकती है और इस प्रकार इसकी आंतरिक स्थिति को प्रभावित कर सकती है। उपयोग clrinject-cli.exe -p -a प्रक्रिया id या...
CVE-2023-21768-POC
CVE-2023-21768-POC CVE-2023-21768 Windows 11 22H2 Local Privilege Escalation POC Usage: WindowsAFDLPECVE-2023-21768.exe Where is the process ID decimal to elevate, causing the target process to be elevated to SYSTEM privileges...
CVE-2021-43650
CVE-2021-43650 Webrun = 3.6.0.42 SQLi Description Webrun is a web-based management application. In version 3.6.0.42 it was possible to identify and report a SQL Injection vulnerability that occurs during the login process, more specifically we will inject the payload in the POST parameter called...
CVE-2021-31762
..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021...
CVE-2023-21768
CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...
CVE-2023-36319
CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...
CVE-2023-42442
Red Team Offense and Defense: Post-Exploitation Process Sharing for JumpServer Unauthorized Access Vulnerability CVE-2023-42442 Usage: go run CVE-2023-42442.go --url http://192.168.123.120 For details, see the WeChat public account article: https://mp.weixin.qq.com/s/NCSnTsOMxslmf5S6d9896A...
CVE-2025-2783
Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...
CVE-2022-30190-ASR-Senintel-Process-Pickup
This repository does not have a README...
CVE-2023-21554-PoC
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC, analysis at https://www.zoemurmure.top/posts/cve202321554/ Before executing the PoC file, modify the target machine IP address manually. The sign of a successful PoC is the crash of the mqsvc.exe process. There is no pop-up information...
debian-ssh
ديبيان OpenSSL مولد الأعداد العشوائية المتوقع PRNG الروابط الرابط الأصلي: http://metasploit.com/users/hdm/tools/debian-openssl/1 مرآة2 الاستغلال: https://www.exploit-db.com/exploits/5622/ بيرل3 https://www.exploit-db.com/exploits/5720/ بايثون4 https://www.exploit-db.com/exploits/5632/ روبي12 الأد...
CVE-2026-44037
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet, DcmJSONReader::parseElement and DcmJSONReader::parseSequence in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOM JSON document...