CVE-2019-10685

CVE-2019-10685 La entrada proporcionada por el usuario que contiene JavaScript se refleja en código JavaScript en una respuesta HTML a través del parámetro "TextField". Publicación de Exploit-DB en https://www.exploit-db.com/exploits/46804 Publicación de PacketStorm en...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v3.0.7 Restaurtant CMS System Logs section of the web application. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute reflective cross site scripting...

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - Unauthenticated SQL Injection Description The Course Booking System plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2022-25584

Flexwatch Flexwatch-CVE This document is for CVE-2022-25584 "RESERVED" https://vulners.com/cve/CVE-2022-25584 This vulnerability has been indexed by CNVD, but has not yet been made public CNVD ID:CNVD-2021-103443 Vulnerability to reproduce: We found that the FlexWATCH FW3170-PS-E Network Video...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Detección de vulnerabilidad USAGE python MS15-034.py www.xxx.com:80 Programa de prueba Vulnerabilidad de ejecución remota de código en HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilidad de ejecución remota de código existe en la pila de protocolos HTTP HTTP.sy...

cloudprober

cloudprober.org | Iniciar Monitoreo Ahora Cloudprober: Monitoreo de Sistemas Confiable, ¡Simplificado! Cloudprober potencia tu monitoreo con sondas activas también conocido como monitoreo sintético para garantizar que tus sistemas—homelabs, microservicios, APIs, sitios web o conexiones...

CVE-2026-19669

The user-mode syscall verifiers zvrfyfuelgaugegetprops and zvrfyfuelgaugesetprops in drivers/fuelgauge/fuelgaugesyscallhandlers.c declared two variable-length arrays, union fuelgaugepropval kvalslen and fuelgaugepropt kpropslen, sized directly by the caller-supplied len argument. len is an...

system_bt_AOSP10_r33_CVE-2020-0471

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

fsmon

fsmon Utilidad de monitorización de sistema de archivos de bajo nivel para Linux, Android, iOS y macOS. Autor : pancake @ nowsecure Licencia : MIT Diseñado para Administradores de sistemas y respondedores de incidentes Investigadores de seguridad y analistas forenses Desarrolladores que depuran...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Summary A Local Privilege Escalation LPE vulnerability in MEmu Android Emulator 9.2.7.0. The...

CdpSvcLPE

CdpSvcLPE Windows Local Privilege Escalation via CdpSvc service Writeable SYSTEM path Dll Hijacking Short Description: Connected Devices Platform Service or CDPSvc is a service which runs as NT AUTHORITY\LOCAL SERVICE and tries to load the missing cdpsgshims.dll DLL on startup with a call to...

IDiagnosticProfileUAC

IDiagnosticProfileUAC Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. This COM object can be used to create instance of DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 COM object which exposes SaveDirectoryAsCab metho...

PINKPANTHER

PINKPANTHER Brief Windows x64 kernel-mode handcrafted shellcode to replace primary access token of executing process with SYSTEM process token for Elevation of PrivilegeEoP. Supported OS Versions Windows 7/Windows Server 2008 R2 Build 7601 Windows 8/Windows Server 2012 Build 9200 Windows...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

CVE-2021-29447

WordPress XXE Vulnerability : CVE-2021-29447 A user with the ability to upload a malicious WAVE file like an Author can exploit an XML parsing issue in the Media Library in WordPress leading to XXE attacks and that could lead to file system disclosure Vulnerable code XML External Entity XXE...

systeminformer

System Informer Una herramienta gratuita, potente y multipropósito que te ayuda a monitorear los recursos del sistema, depurar software y detectar malware. Traído a ti por Winsider Seminars & Solutions, Inc...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ ¿Qué Es? CrackLord es un sistema diseñado para proporcionar un sistema escalable, conectable y distribuido tanto para el descifrado de contraseñas como para cualquier otro trabajo que necesite muchos recursos informáticos. Dicho de otra manera,...