3459 matches found
TrueConf Server Authentication Privilege Escalation
The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...
Langflow AI <= 1.6.9 - CORS Misconfiguration
Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any origin to make credentialed requests. Combined with SameSite=None cookies, this enables cross-origin token theft and subsequent remote code execution via the /api/v1/validate/code endpoint. id:...
Yamcs <=5.8.6 - Cross-Site Scripting
Yamcs 5.9.4 contains a stored XSS caused by inadequate HTML escaping of attacker-controlled redirecturi parameter in authorization template, letting attackers execute JavaScript to steal authentication data, exploit requires user to open crafted URL. id: CVE-2026-55549 info: name: Yamcs =5.8.6 -...
cve-2025-7771
CVE-2025-7771 β ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control β any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...
lenovo-dispatcher-poc
Lenovo Dispatcher PoC This is a basic proof of concept to exploit lenovo dispatcher driver LnvMSRIO.sys CVE-2025-8061. Vulnerabilities found by Luis Casvella source: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. The main idea of this poc is to exploit the read/write...
CVE-2021-40101
Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4 A Concrete CMS admin in versions below 9 did not have to provide their password when changing another user's password. In combination with CVE-2021-28145 "Concrete CMS formerly concrete5 before 8.5.5 allows remote...
CVE-2025-22381
CVE-2025-22381: Host Header Injection in Aggie Detailed analysis and Proof-of-Concept for CVE-2025-22381, a Host Header Injection vulnerability discovered in the Aggie Open-Source Project. Vulnerability Overview+ CVE ID: CVE-2025-22381 Published: October 2025 MITRE assignment Disclosed publicly:...
CVE-2024-26229-BOF
CVE-2024-26229 BOF Beacon Object File implementation of CVE-2024-26229 β Windows CSC driver local privilege escalation via DKOM token theft. Based on RalfHacker/CVE-2024-26229-exploit, converted to BOF with Dynamic Function Resolution DFR for use with C2 frameworks that support the Cobalt Strike...
CVE-2023-31779
CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...
TokenStealer
TokenStealer A simple tool I wrote some time ago for stealing and playing with Windows tokens. Parts of code have been taken and adatpted from https://github.com/FSecureLABS/incognito Clearly, you will require Impersonation or AssignPrimary privilege and Debug privilege to access all processes...
thingsboard
All-in-one IoT platform for data collection, processing, visualization, and device management. π‘ Get started β’ π Website β’ π Documentation β’ π Blog β’ π LinkedIn π Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. π‘ Getting started with ThingsBoard Check out our Gettin...
RPC-Backdoor
RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: Execute a command with cmd.exe /c and the CreateProcess API call. Steal a token and execute a command with cmd.e...
Microsoft365_devicePhish
Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...
365-Stealer
365-Stealer Table of Contents About 365-Stealer About Illicit Consent Grant Attack Key Features of 365-Stealer Setup Attacking Environment Automated Azure App Registration Manual Azure App Registration Configuring the Application Creating Client Secrets Adding API Permissions Setting Up 365-Steal...
CVE-2026-25253
CVE-2026-25253: One-Click RCE in OpenClaw via Auth Token Theft Affected Software: OpenClaw clawbot LEGAL DISCLAIMER: This code and writeup are provided for authorized security research and educational purposes only. Use of this exploit against systems without explicit written permission is illega...
openclaw-dashboard
OpenClaw Agent Dashboard A beautiful, secure, real-time monitoring dashboard for OpenClaw agents. Track sessions, monitor API usage, view costs, manage memory files, and keep tabs on system health - all in one place. Screenshots Overview| Sessions| Costs ---|---|--- | | Rate Limits| Live Feed| Lo...
StopDefender
StopDefender Stop Windows Defender programmatically creating a new token using TrustedInstaller and Windefend service accounts. One button stop action, no need for supply commandline options nor pid. Usefull for integration with Post Explotation frameworks. Blogpost...
CVE-2026-79294
CVE-2026-79294 CVE-2026-79294 β Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Vulnerability Details Vulnerability Type: Stored/Stored-like...
CVE-2025-51864
CVE-2025-51864 Vulnerability description AIBOX is a web application for exploring AI consulting and trying out multiple LLMs. It allows users to chat with various LLMs. A reflected cross-site scripting XSS vulnerability exists in the chat component, which could lead to JWT token theft and remote...
CVE-2020-1054
CVE-2020-1054 CVE-2020-1054 Learning Screenshot ζζεΎ Reference https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html steal Security token https://github.com/mwrlabs/CVE-2016-7255 leak function https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...