Xenotix-Python-Keylogger

Xenotix Python Keylogger para Windows IMPORTANTE: EL DESARROLLO Y SOPORTE DEL PROYECTO ESTÁN DESCONTINUADOS uso: xenotixpythonlogger.py mode optional modo: local: guarda los registros en un archivo keylogs.txt remote: envía los registros a un Formulario de Google. Debes especificar la URL del...

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

Qlik Sense Enterprise - Path Traversal

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS 漏洞模拟实验室（CVE-2026-25172、CVE-2026-25173、CVE-2026-26111） ⚠️ 重要提示 – 仅限教育和防御用途 本指南旨在搭建一个隔离的、受控的实验室环境 ，以了解 Windows 路由和远程访问服务（RRAS）管理工具中的整数溢出漏洞。请勿 在未经明确授权的任何系统上使用这些技术。确保你的实验室没有互联网或生产网络访问 。 📋 概述 本实验室模拟了 RRAS 管理工具中的三个关键漏洞（CVE-2026-25172、CVE-2026-25173、CVE-2026-26111）。已认证的域用户或管理员可能会被诱骗，将 RRA...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...

PT-2026-86788

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...

AllTools v1.7

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

forti_shield

fortishield 一个结合了 CVE-2021-31955、CVE-2015-4077 和 CVE-2015-5736 的 POC 这是2022版 EXP-401 课程中“额外挑战”的可能解决方案之一。该额外挑战在2025版课程中已被移除。如果不修改偏移量，此解决方案将无法适用于当前的额外挑战。本 POC 中的所有偏移量均为硬编码，且不依赖版本。它适用于 Windows 10 20H2。 来自 freeide 的 CVE-2021-31955 POC 经过修改，用于泄露漏洞利用进程的...

Crow-Eye v0.13.0

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

chainsaw

Windows 포렌식 아티팩트 신속 검색 및 헌팅 Chainsaw는 이벤트 로그 및 MFT 파일과 같은 Windows 포렌식 아티팩트 내에서 위협을 신속하게 식별할 수 있는 강력한 '1차 대응first-response' 기능을 제공합니다. Chainsaw는 이벤트 로그에서 키워드를 검색하는 일반적이고 빠른 방법을 제공하며, Sigma 탐지 규칙에 대한 기본 제공 지원과 사용자 정의 Chainsaw 탐지 규칙을 통해 위협을 식별합니다. 기능 🎯 Sigma 탐지 규칙 및 사용자 정의 Chainsaw 탐지 규칙을 사용하여 위협 헌팅...

MAL-2026-15933 Malicious code in houdus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1c6df3b6cf8e44eceecfcd1aa44ee0301e8921b0c5294560c0031c0b17b6e6 The package advertises random-number helpers but its generator.py side-loads houdus/assests/ssd.wav as Python via importlib.util.specfromfilelocation...

Malicious code in houdus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1c6df3b6cf8e44eceecfcd1aa44ee0301e8921b0c5294560c0031c0b17b6e6 The package advertises random-number helpers but its generator.py side-loads houdus/assests/ssd.wav as Python via importlib.util.specfromfilelocation...

EUVD-2026-70790

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

CVE-2026-85456

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

CVE-2026-85456

MOOS-IvP through version 24.8.1 is affected by a path traversal vulnerability in the SplitHandler component (located in ivp/src/lib_logutils/SplitHandler.cpp). The root cause is improper validation of variable names extracted from alog files: attackers can supply crafted alog files containing bac...

CVE-2026-85456 MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

CVE-2026-85456 MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...