12 matches found
CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept
CVE-2025-33053 - إثبات المفهوم PoC لتنفيذ التعليمات البرمجية عن بُعد RCE عبر WebDAV ومحاكاة القيادة والتحكم C2 ⚠️ لأغراض تعليمية فقط يوضّح هذا المشروع إثبات مفهوم يستغل WebDAV وتوصيل ملفات .url لتحقيق تنفيذ تعليمات برمجية عن بُعد بشكل واقعي. يتضمن ملفًا تنفيذيًا قائمًا على الإغراء decoy ومحاكاة...
DEBIAN-CVE-2026-50023
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
CVE-2026-5427
CVE-2026-5427 concerns the Kubio AI Page Builder WordPress plugin (
EUVD-1999-0280
Malware in sbrugna...
WebDAV Windows 10 - Remote Code Execution (RCE)
Exploit Title: WebDAV Windows 10 - Remote Code Execution RCE Date: June 2025 Author: Dev Bui Hieu Tested on: Windows 10, Windows 11 Platform: Windows Type: Remote CVE: CVE-2025-33053 Description: This exploit leverages the behavior of Windows .URL files to execute a remote binary over a UNC path...
Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability
This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...
Security fix for the ALT Linux 10 package firefox-esr version 102.8.0-alt1
102.8.0-alt1 built March 15, 2023 Pavel Vasenkov in task 316239 March 3, 2023 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2023-25728 Content security policy leak in violation reports using iframes + CVE-2023-25730 Screen hijack via browser fullscreen mode + CVE-2023-0767 Arbitrary...
MS16-104: Internet Explorer URL files Security Feature Bypass (CVE-2016-3353)
On September 13th, 2016 Microsoft released security bulletin MS16-104 1, which addresses several vulnerabilities affecting Internet Explorer. One of those vulnerabilities is CVE-2016-3353, a security feature bypass bug in the way .URL files are handled. This security issue does not allow for remo...
CVE-2016-3353
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...
Security feature bypass
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...
Litespeed Web Server 3.2.3 - Source Code Disclosure
Litespeed Web Server 3.2.3 - Source Code Disclosure | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats...