Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Metasploit module for Geutebrueck GCore "video management" system. Tested with version 1.3.8.42 and 1.4.2.37. Full remote code execution with NT/System privileges on Windows Win 2012R2,Win8.1,... with the installed Geutebrueck products GCore. Authors:...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81738

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

win-exec-calc-shellcode

win-exec-calc-shellcode Shellcode pequeño y libre de NUL que ejecuta calc.exe. Se ejecuta en versiones x86 y x64 de Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, todos los service packs. Tamaños build 306...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service component of OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information by supplying crafted NRPT inputs . The CVSS 4.0 base score is 5.9 (MEDIUM) with a loc...

CVE-2026-78043

OpenVPN's Windows Interactive Service in versions 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint, enabling them to load arbitrary configuration files via specially crafted paths. The CVSS 4.0 base score is 5.6 (MEDIUM) with a loc...

Xenotix-Python-Keylogger

Xenotix Python Keylogger para Windows IMPORTANTE: EL DESARROLLO Y SOPORTE DEL PROYECTO ESTÁN DESCONTINUADOS uso: xenotixpythonlogger.py mode optional modo: local: guarda los registros en un archivo keylogs.txt remote: envía los registros a un Formulario de Google. Debes especificar la URL del...

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

Qlik Sense Enterprise - Path Traversal

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

Ivanti Avalanche 6.3.2 - Local File Inclusion

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

LPE---CVE-2020-0796

Uso: Asegúrese de que Python esté instalado y luego ejecute poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Diseñado únicamente para fines educativos y de prueba en entornos corporativos. MasterSpl0it no se hace responsable del código, úselo bajo su propio riesgo. POC reescrito de...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

miniplasma-advisory

MiniPlasma - Aviso de protección contra vulnerabilidades Aviso técnico de mitigación para la variante MiniPlasma de CVE-2020-17103 que afecta al controlador de mini-filtro de Windows Cloud Files cldflt.sys. Autor: Rafael França - Arquitecto de Ciberseguridad de Microsoft CSA, Unidad de Éxito del...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...