CVE-2025-33053-POC

CVE-2025-33053 - WebDAV Esecuzione Remota di Codice RCE PoC & Simulazione C2 ⚠️ Solo a Scopo Educativo Questo progetto dimostra un proof-of-concept che sfrutta WebDAV e la consegna di file .url per ottenere un'esecuzione remota di codice realistica. Include un eseguibile fittizio e una simulazione...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra Distribuire malware tramite CVE-2024-21412 Utilizzo Avviare i servizi in sequenza e accedere al web server webserver Avviare il web server nella cartella: python -m http.server Accesso iniziale: Utilizzare la sintassi di query avanzata di Windows AQS per collegarsi al...

RP_RecordClip_DLL_Hijack

Remote-DLL-Hijack-Sicherheitslücke in Real Player CVE-2022-32291 Die Player-Anwendung die beim Start von Real Converter angreifbar ist und der Recording Manager sind anfällig für ein Remote-DLL-Hijack-Problem Binary Planting, weil auf unsichere Weise nach nicht vorhandenen DLLs gesucht wird. Um d...

PT-2026-41960

Name of the Vulnerable Software and Affected Versions zrok affected versions not specified Description A path traversal issue exists when using the zrok2 copy command to move files from a WebDAV or zrok drive to a local filesystem. An attacker can provide a malicious DAV href containing directory...

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra aka DarkCasino targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails...

Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

Exploit Title: Real Player 16.0.3.51 - 'external::Import' Directory Traversal to Remote Code Execution RCE Google Dork: n/a Date: May 31, 2022 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: ver. 16.00.282, 16.0.3.51, Cloud 17.0.9.17,...

Microsoft Internet Explorer ShowSaveFileDialog DLL Loading Arbitrary Code Execution Vulnerability

Microsoft Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer suffers from an arbitrary code execution vulnerability in its implementation, which can be exploited by an attacker who places a file in a remotely accessible UNC or WebDAV share location to execute arbitrary...

HyperAccess - Multiple Vulnerabilities

Not long now... ======================================================================== = Hyper Access - Multiple Vulnerabilities = = Vendor Website: = http://www.hilgraeve.com = = Affected Software: = Hyper Access 8.4 and possibly lower = = Public disclosure on Thursday December 14, 2006...