CVE-2023-29343

CVE-2023-29343 Este é um PoC para a falha de escrita arbitrária de arquivos no Sysmon versão 14.14 Após o último patch, o Sysmon verifica se o diretório Archive existe e, se existir, verifica se o diretório archive pertence a NT AUTHORITY\SYSTEM e se o acesso é concedido apenas a NT...

faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

faxhell

faxhell "Fax Shell" Una shell di tipo bind shell Proof-of-Concept che utilizza il servizio Fax e un dirottamento di DLL basato su Ualapi.dll. Vedi il nostro approfondimento su: https://windows-internals.com/faxing-your-way-to-system/ Come usare Compila Ualapi.dll e posizionala in...

slowloris

slowloris.py - Einfacher Slowloris in Python Was ist Slowloris? Slowloris ist im Grunde ein HTTP-Denial-of-Service-Angriff, der threaded Server betrifft. Er funktioniert wie folgt: 1. Wir beginnen, viele HTTP-Anfragen zu stellen. 2. Wir senden periodisch alle 15 Sekunden Header, um die Verbindung...

esp32_esp8266_attacks

Attacchi Wi-Fi su ESP32/ESP8266 Questo repository fa parte dei risultati di ricerca delASSET Research Group. Questo repository dimostra 3 attacchi Wi-Fi contro i popolari dispositivi IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Dirottamento di client ESP32/ESP8266 connessi a reti...

UniPwn

Analisi dell'iniezione di comandi del servizio BLE del robot Unitree Autore: Bin4ry aka Andreas Makris [email protected] Coautore: h0stile aka Kevin Finisterre Contributore: legion1581 aka Konstantin Severov di theroboverse ha contribuito a correggere il payload per l'iniezione e lo ha...

SharpNoPSExec

SharpNoPSExec Esecuzione di comandi senza file per movimento laterale. SharpNoPSExec interroga tutti i servizi e ne seleziona casualmente uno con tipo di avvio disabilitato o manuale, stato corrente fermo e privilegi di LocalSystem da riutilizzare. Una volta selezionato il servizio, ne salva lo...

PyFlooder

PyFlooder Uno script Python HTTP Flood che può fermare un normale sito web in 10 secondi Come funziona? Genera un numero configurabile di richieste GET casuali e le invia al bersaglio Utilizzo root@kitploit: pyflooder.py...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC PoC complementare all'articolo di Hunt-Benito "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 è un buffer overflow basato su stack in...

CVE-2026-3686

IBM Cloud Pak for Data System versions 11.3.0.2 through Interim Fix 001 are vulnerable to a denial of service caused by improper limitation of resources . The CVSS v3.1 base score is 6.2 (MEDIUM) with a local attack vector, no privileges required, and high availability impact but no confidentiali...

CVE-2025-36290

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...

MikroTik-Winbox-Scanner

Сканер протокола Winbox MikroTik RouterOS Высокопроизводительный конкурентный сканер, предназначенный для обнаружения открытых сервисов MikroTik Winbox в интернете. Этот инструмент выявляет активные конечные точки Winbox на TCP-порту 8291 и классифицирует поведение ответов RouterOS для определени...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini che sono stati presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutare a riportarli a...

CVE-2026-81520

MongoDB Connector for BI is vulnerable to a denial-of-service condition caused by an unbounded SASL authentication negotiation loop . A network-reachable, unauthenticated client can initiate a SASL-based login exchange and then decline to complete it. Because the negotiation loop had no overall t...

CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-77218

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

CVE-2026-75125

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-75124

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-76651

A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...