CVE-2018-20250

CVE-2018-20250-3 010 Editor template for ACE archive format & CVE-2018-20250-3 ace.bt 010 editor template acefile.py open source ACE extractor, used for writing the template watchme.gif demo wace269i WinAce installer Disclaimer: All resources in this project are for technical research purposes on...

ACE

Automated Collection and Enrichment The Automated Collection and Enrichment ACE platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Código de prueba de concepto en C para explotar la ruta de extracción de archivos ACE de WinRAR CVE-2018-20250. Recursos https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/...

CVE-2018-20250-WINRAR-ACE-GUI

CVE-2018-20250-WINRAR-ACE-GUI CVE-2018-20250-WINRAR-ACE Exploit with a UI. Original Code : https://github.com/blau72/CVE-2018-20250-WinRAR-ACE...

cpiopwn

cpiopwn CVE-2021-38185 Esta es una POC Prueba de Concepto de tipo ACE Ejecución de Código Arbitrario de un error de desbordamiento de enteros en cpio. Este exploit evita todas las protecciones binarias excepto RELRO completo. Este exploit usa cpio 2.13 y libc 2.31. Video demo:...

CVE-2026-94046

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

CVE-2026-94046

ACE-MCP (version up to 4.10.8) contains a path traversal vulnerability in the get_file_snippet function of getFileSnippet.ts within its MCP Tool component. The root cause is that isPathInsideProjectRoot only validates that filePath does not escape the projectRootPath, but projectRootPath itself i...

CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

EUVD-2026-83780

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

CVE-2026-94046 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

WinRar_ACE_exploit_CVE-2018-20250

WinRar ACE exploit CVE-2018-20250 This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250 It is based on previous project developed by WyAtu It is used for educational purposes on Daniel Vispo Blog How to generate the evil exploit...

WindowsDACLEnumProject

Windows DACL Enum Project A collection of tools to enumerate and analyse Windows DACLs Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject Released under AGPL...

ezwinrar

ezwinrar Python tool exploiting CVE-2018-20250 found by CheckPoint folks : https://research.checkpoint.com/extracting-code-execution-from-winrar/ By crafting the filename field of the ACE format, the destination folder extraction folder is ignored, and the relative path in the filename field...

cve-2014-7911-exp

cve-2014-7911-exp exploit for cve-2014-7911; android; java deserialization ;system privilege;ace; This exp refers to retme7's exp,but the rop chain is different. And the most important part is Chunk Spray. Hope it will help. environment device:nexus5 os version:Android4.4.4...

ace-vim-neovim

ace-vim-neovim Ejecución de código arbitrario en Vim/Neovim mediante modelines CVE-2019-12735 Uso 1. escucha root@kitploit: nc -vlp 9999 2. ejecuta root@kitploit: vim pocshell.txt Y entonces, tu localhost obtendrá una shell...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Corrected the incorrect validation of the numaces field in smbacl. parsedcal now validates numaces to allocate an array of posixacestatearray. If numaces is greater than ULONGMAX / sizeofstruct smbace++, it results in a...

CVE-2026-71940

DrayTek VigorSwitch multiple models contain a buffer overflow in the acl_general_setup Edit ACE function, caused by copying the name field into a fixed-size buffer without length validation. A remote attacker with valid administrative credentials for the device's web management interface can trig...

EUVD-2026-64999

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

CVE-2026-72382

A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...

Stitching the Kill Chain: Detecting NTDS.dit Exfiltration with Trellix Helix Correlation

Stitching the Kill Chain: Detecting NTDS.dit Exfiltration with Trellix Helix Correlation By Adithya Chandra and Maulik Maheta · August 18, 2026 Executive Summary While attackers continuously cycle through new tooling, their underlying techniques remain remarkably consistent. Credential theft from...