CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

how-to-bypass-aslr-on-linux-x86_64

Breaking 64 bit aslr on Linux x86-64 In this article, I'll discuss about the application of the technique described by Samuel Groß in his Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, to bypass ASLR on Linux x8664. To show this I'm gonna solve a...

CRM Platform Authentication Bypass

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure Networking Privilege Escalation Exploit CVE‑2025‑54914 September 4, 2025 By Mark Mallia 1. Executive Summary On September 4, 2025 Microsoft’s Azure Networking services received a critical security advisory that documents a...

Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

DLHell

DLHell DLHell performs DCOM local & remote Windows DLL Proxying. Install The following packages are required might depend on your distro, the following example is for Debian 12: sudo apt install -y g++-mingw-w64-x86-64-win32 binutils-mingw-w64-x86-64 Install pip dependencies: pip3 install -r...

CVE-2026-114379

A file inclusion vulnerability exists in EKKOLearnAI ekko-studio versions up to 1.0.6 . The flaw is located in the Media Generation API component, specifically within the saveGeneratedImages function of the file packages/server/src/modules/studio/controllers/media.ts. An attacker can manipulate t...

CVE-2026-114379 EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion

A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument outputpath causes file inclusion...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

ALLMediaServer-1.6-Buffer-Overflow

CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP crash remote asterisk instances : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

CVE-2019-9766

CVE-2019-9766 Do my best About CVE Free MP3 CD Ripper It is a switcher between .mp3 files and other filetype converting a file. Bug According to the NVD we can find that, in the vision 2.6 there is a Stack-based Overflow in the Buffer Area. So we can create a Poc for it. Filetype changed to .mp3...

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

CVE-2018-7848

CVE-2018-7848 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

cve-2023-22515-1

🛡️ CVE-2023-22515: In-Depth Analysis of Confluence Privilege Escalation Vulnerability !IMPORTANT Urgent Security Alert : This vulnerability has a CVSS score of 10.0 Critical , the highest risk level. If you are using an affected version, immediate patching is required. 1. Overview CVE-2023-22515...