CVE-2024-21413-POC

CVE-2024-21413 - POC الاستخدام: python CVE-2024-21413.py -host example.com -port 25 -from [email protected] -recipient [email protected] -url xx.xx.xx.xx/path/to/shared/file/r0tb1t.rtf !NOTE r00tb1t : هو ملف الاختبار المشترك ملف Word في هذه الحالة من جهاز المهاجم xx.xx.xx.xx. لضمان...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 و CVE-2025-4428 سلسلة Ivanti EPMM أداة توليد Artifact للكشف عن سلسلة Pre-Auth RCE من نوع 1day في Ivanti EPMM الاكتشاف أثناء التنفيذ $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | ...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

PoC لسلسلة RCE قبل المصادقة في SonicWall SMA 100 PoC لسلسلة RCE قبل المصادقة في SonicWall SMA 100 CVE-2023-44221, CVE-2024-38475 للمزيد من التفاصيل التقنية، راجع مقالنا على المدونة https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC أثناء التنفيذ python...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – fuite d'informations de declaringClass d'enum et chaîne RCE À des fins éducatives et de recherche en sécurité autorisée uniquement. Ce dépôt fournit un environnement de laboratoire contrôlé pour reproduire la vulnérabilité CVE-2025-48734 dans Apache...

DoubleStar

. . \ | | | / // | | | \ / \ | | | \ | | / \ \ \ \ \ | | | /| \ | |\ / / \ | | / | | / / / / |/ | /|/ / / || /| | / / / / / سلسلة استغلال RCE لمتصفحي IE/Firefox على ويندوز 8.1 - الهروب من صندوق الحماية - تصعيد الصلاحيات إلى SYSTEM | Remote PAC | || ^ | HTTPS RPC/ALPC RPC/ALPC | firefox.exe |...

watchTowr-vs-SysAid-PreAuth-RCE-Chain

SysAid PreAuth RCE Chain PoC إثبات المفهوم لسلسلة RCE بدون مصادقة في SysAid CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778 انظر منشور مدونتنا للتفاصيل الفنية https://github.com/user-attachments/assets/03245fab-915d-43b6-8e91-f0a18251af49 PoC أثناء التنفيذ python...

RestrictedPython guard hooks can be shadowed via positional-only arguments

Impact RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes getattrobj, name, item access becomes getitemobj, key, writes go through write, and print goes through print. The embedding application supplies these hooks to enforce its policy. Argument-na...

CVE-2026-72826 Grav before 1.0.13 Scope Bypass via createApiKey

The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-target path of requireApiKeyPermission requires only the baseline api.access scope, and the new key's scopes are read directl...

CVE-2026-72826

The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-target path of requireApiKeyPermission requires only the baseline api.access scope, and the new key's scopes are read directl...

TerraMaster TOS 4.2.15 Remote Code Execution Exploit

This Metasploit module is a Terramaster chained exploit that performs session crafting to achieve escalated privileges that allows an attacker to access vulnerable code execution flaws. TOS versions 4.2.15 and below are affected. This module requires Metasploit: https://metasploit.com/download...