bleeding_onions

BleedingOnions Tracking the Exit and Guard relays edges of the Tor network for CVE-2014-0160. https://encrypted.redteam.net/bleedingonions/ Special thanks to: Stem, a python controller library for Tor https://stem.torproject.org/. Steffen Ullrich's perl script to check for CVE-2014-0160...

CVE-2023-23397_EXPLOIT

CVE-2023-23397 MS Outlook Vulnerability Exploitation CVE-2023-23397 is a vulnerability in Microsoft Outlook that allows an attacker to potentially exfiltrate user authentication details. The vulnerability stems from the ability of an attacker to specify a Universal Naming Convention UNC path in t...

cve-2023-23397

CVE-2023-23397 This script allows to create TNEF-encoded Outlook e-mails with CVE-2023-23397 exploit payload and send them via pure SMTP - no need in COM objects or EWS. I could not get IPM.Schedule.Meeting.Request message class to work properly it generates both meeting and the reminder but does...

ACEDcup

ACEDcup أداة ACEDcup هي مولد حمولة payload لهجوم إلغاء التسلسل الثنائي لجافا ACED لـ Apache Commons FileUpload الإصدار = 1.3 CVE-2013-2186 و Oracle JDK الإصدار 7u40 يعمل الهجوم حتى مع الإصدارات الأحدث من المكتبة أو جافا. يمكننا رفع أي محتوى في أي مجلد، لكن لا يمكننا التحكم في اسم الملف شيء مثل...

Linux Distros Unpatched Vulnerability : CVE-2026-15576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification...

CLSIDFinder

CLSIDFinder Invoke-CLSIDFinder enumerates CLSID and AppID entries from the Windows registry to identify COM objects associated with Windows services via the LocalService value. The function correlates these entries, exports the results to a CSV file, and attempts COM activation when the related...

CVE-2026-81633

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

CVE-2026-81636

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

CVE-2026-81633

CVE-2026-81633 is an improper input validation vulnerability in ash-project ash_graphql (Elixir GraphQL library). The function resolve_node/2 base64-decodes a client-supplied global ID and passes the type segment directly to Map.fetch!/2, which raises an unhandled KeyError when the type is not a ...

CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

KrbRelayUp

KrbRelayUp Wrapper simple autour de certaines fonctionnalités de Rubeus et KrbRelay et de quelques autres mentions honorables dans la section remerciements afin de rationaliser l'abus de la primitive d'attaque suivante : 0. Facultatif Création d'un nouveau compte machine New-MachineAccount 1...

CVE-2023-23397-Report

CVE-2023-23397-Report عرض توضيحي لاستغلال ثغرة تصعيد الامتيازات في Outlook تُعد CVE-2023-23397 ثغرة حرجة من نوع تصعيد الامتيازات EoP في Microsoft Outlook، وتُستغل عندما يرسل المهاجم رسالة تتضمن خاصية MAPI موسّعة تحمل مسار UNC إلى مشاركة SMB TCP 445 على خادم يتحكم فيه المهاجم على شبكة غير موثوقة. ...

LdapRelayScan

LDAP Relay Scan Un outil pour vérifier les protections du serveur LDAP des contrôleurs de domaine concernant le relais d'authentification NTLM. Si vous êtes intéressé par les spécificités de l'énumération basée sur les erreurs, voir ci-dessous. Pour plus de détails sur ce qui peut être fait...

NegoExRelay

Negoexrelayx - Outil de relais NegoEx Toolkit pour abuser de Kerberos PKU2U et NegoEx. Nécessite impacket Il est recommandé d'installer impacket directement depuis git pour disposer de la dernière version disponible. negoexrelayx.py Cet outil vous permet de relayer l'authentification NegoEx avec...

PT-2026-83626

Name of the Vulnerable Software and Affected Versions ash graphql versions 0.27.0 through 1.10.9 Description Improper input validation allows an unauthenticated client to crash a relay nodeid: ... query. The AshGraphql.Graphql.Resolver.resolve node/2 function uses decode relay id/1 to decode a...

PT-2026-83631

Name of the Vulnerable Software and Affected Versions ash graphql versions 0.16.23 through 1.10.9 Description An unauthenticated client can bypass the configured GraphQL query-complexity limit to force an unbounded database read. This occurs because the query complexity/3 function in...

CVE-2024-4573-Mitigation-Script

Script di Mitigazione CVE-2024-4573 CVE-2024-43451 è una vulnerabilità nei sistemi che permettono l'autenticazione NTLM, un protocollo legacy che può essere sfruttato per attacchi di relay di credenziali o attacchi di forza bruta. Questa vulnerabilità si presenta quando NTLM è abilitato, lasciand...

CVE-2020-13941

CVE-2020-13941: Missbrauch von UNC-Pfaden in Windows-Umgebungen in Apache Solr Es wurde festgestellt, dass mehrere Solr-Endpunkte absolute Pfade akzeptieren. Unter Windows-Systemen können diese absoluten Pfade erzwungen werden, damit das Betriebssystem eine Verbindung zu einem...

NPM: 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

NPM: 9router: Unauthenticated /v1 proxy access via Host-header spoofing → open AI relay + SSRF vulnerability discovered by ? in WordPress Npm 9router versions 0.5.2...