CVE-2025-31161

CVE-2025-31161 is a critical severity vulnerability allowing attackers to control how user authentication is handled by CrushFTP managed file transfer MFT software. Affected versions: 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 Exploit summary: Remote and unauthenticated HTTP requests to...

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

czds

CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...

external_c2_framework

externalc2 framework Python framework for building and utilizing interfaces to transfer data between frameworks, with a specific focus on serving as an extension to Command and Control frameworks. Currently, this is only intended as an implementation of Cobalt Strike's External C2 specification a...

CVE-2018-3252

CVE-2018-3252 1. Decompile WebLogic private void handleDataTransferRequestHttpServletRequest paramHttpServletRequest, HttpServletResponse paramHttpServletResponse, AuthenticatedSubject paramAuthenticatedSubject throws IOException if isDebugEnabled debug"Received DataTransferRequest : "; String st...

CVE-2023-34362

CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on the blog: Summary This POC abuses an SQL injection to obtain a sysadmin API access token and then uses that access to abuse a deserialization cal...

CVE-2025-27407

CVE-2025-27407 GitLab Podman Lab Minimal local-only lab for proving the GitLab Direct Transfer HTTP path reaches the vulnerable graphql-ruby introspection schema loader. The lab runs one vulnerable GitLab CE container; the PoC script starts its fake GitLab source server in-process only while...

Sleipnir

Sleipnir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Released under AGPL see LICENSE for more information Description Sleipnir is a small executable designed for quick...

Fenrir

Fenrir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Released under AGPL see LICENSE for more information Description Fenrir was created to prove that it is possible to...

CVE-2023-34362

CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ Summary This POC abuses an SQL injection...

dnschan

dnschan This is a trojan that runs over DNS. You can: handle multiple agents very slowly upload files fetch files from the web run processes...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5806. See our blog post at TBD. PoC in Action See --help for, well, help. A typical run should look like this: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ \ / | | | | / ...

Tryhackme_Billing

TryhackmeBilling Billing CTF MachineCVE-2023-30258Remote Code Execution...

pwnfb50

pwnfb50 Transfer ownership of any FB50 smart lock to yourself CVE-2019-13143 PoC Video Usage $ python3 pwnfb50.py id mac Where id is your user ID, and the mac is your lock's MAC address...

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

NewPowerDNS

NewPowerDNS NewPowerDNS is an updated version of @domchell's PowerDNS. The main feature added is support for transferring files using DNS A records. See below for a complete list of the modifications made: Support for transfer over DNS A records Gzip compression to reduce file transfer size Suppo...

CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open printf 'GET / HTTP/1.1\r\nHost: localhost\r\nTransfer-Encoding:...

CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization rouille Assigned CVE ID: CVE-2026-67181 Summary rouille::proxy::proxy forwards the client's Transfer-Encoding header to the backend unchanged, but writes the request body that tinyhttp has already de-chunked. It nev...

CVE-2025-55315-repro

CVE-2025-55315-repro This repository contains a small ASP.NET Core console app to reproduce and exercise HTTP chunked-transfer and newline parsing behavior. More information on CVE-2025-55315. Contents Repro/Program.cs - Console app that starts a local Kestrel server and runs two TCP-based tests...

Progress-MOVEit-Transfer-2020.1-Stored-XSS-CVE-2020-28647

Progress MOVEit Transfer 2020.1 Stored XSS CVE-2020-28647 During a recent web application test engagement one of the applications in scope was a MOVEit Transfer 2020 web application. While performing the assessment a Stored Cross-Site Scripting XSS vulnerability was identified. This blog post wil...