CVE-2026-66384

cve-id Donar Ayude a mantener este proyecto Si encuentra útil este proyecto, considere apoyar su mantenimiento continuo a través de PayPal o ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ El diez por ciento de cada donación se destina al Hospital Infantil...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

Versions of PeaZip prior to 11.3.0 are vulnerable to OS command injection when running in a non-default configuration. The root cause is the mishandling of the string "quotation character already used in the string" when processing a filename in an archive . Impacting the local system, this vulne...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

cowrie v3.1.0

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

CVE-2025-64155-hunter

Escáner CVE-2025-64155 Un escáner en Python para detectar la vulnerabilidad de inyección de comandos CVE-2025-64155 en el servicio Phoenix Monitor. Descripción CVE-2025-64155 es una vulnerabilidad de inyección de comandos en el servicio Phoenix Monitor que permite la ejecución remota de código a...

exploit-writing-for-oswe

Escritura de Exploits para OSWE Antecedentes Qué Este repositorio contiene una lista de fragmentos de código snippets y consejos útiles relacionados con la escritura de scripts de exploits en los laboratorios y el examen de certificación OSWE. Algunos ejemplos aquí pueden ir en contra de ciertas...

amazon-mustang-hack

Proyecto asistido por IA. Esta investigación, el desarrollo del exploit y la documentación fueron producidos con asistencia de IA utilizando los modelos GLM-5.3 y DeepSeek V4.1 Flash. amazon-mustang-hack Investigación de exploit de root para el Amazon Fire 7 9.ª gen mustang, MT8163, Mali-T720 en ...

CVE-2026-94593

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Consulta el README real desde NotREADME.md Hice pequeños ajustes y automaticé el proceso si tienes DLL sudo bash run.sh -i interface -d dll si quieres que compile el dll por ti sudo bash run.sh -i interface -c "command"...

CVE-2025-55234

CVE-2025-55234 此漏洞允许攻击者对 SMB（服务器消息块）协议执行中继攻击。若成功利用，可导致权限提升（EoP），使未授权用户获取系统上的更高访问权限。 作者：Mark Mallia 问题 此漏洞允许攻击者对 SMB（服务器消息块）协议执行中继攻击。若成功利用，可导致权限提升——实质上使未授权用户获取系统上的更高访问权限。SMB 由于在企业环境中广泛使用以及历史上存在严重缺陷，长期以来一直是攻击者的目标。例如，CVE-2020-1301 通过畸形请求导致 SMBv1 远程代码执行，而 CVE-2022-32230 通过 SMBv3 空指针解引用导致拒绝服务。臭名昭著的...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · CLI · Architecture ·...

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel Domain Parking RCE Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act...

PetitPotato

PetitPotato Escalada local de privilegios mediante PetitPotam Abuso de privilegios de suplantación. Descripción PetitPotam utiliza MS-EFSR Encrypting File System Remote, un protocolo utilizado para realizar operaciones de mantenimiento y gestión sobre datos cifrados almacenados de forma remota y...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST 认证绕过远程代码执行。 POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host Content-type:...

CVE-2026-94593 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

CVE-2026-94593

The Armatura One software contains a vulnerability where the backup and restore routine records the full database connection command in a host log file. This includes the superuser password in plain text . If an attacker gains access to the server operating system, they can use these disclosed cr...

CVE-2026-94593 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

PowerShell-Obfuscation-Bible

Biblia de Ofuscación de PowerShell Una colección de técnicas, ejemplos y un poco de teoría para ofuscar manualmente scripts de PowerShell y evadir la detección basada en firmas, recopilada con fines educativos. El contenido de este repositorio es el resultado de una investigación personal, que...

vbulletin-exploits

vbulletin-exploits Exploits dirigidos a vBulletin. CVE-2023-25135: RCE pre-autenticación Ver: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command Exploit for CVE-2023-25135:...