EUVD-2026-71468

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...

CVE-2025-8088

CVE-2025-8088 – WinRAR Exploit Este repositorio contiene un generador de archivos RAR maliciosos que abusa de la vulnerabilidad CVE-2025-8088 en WinRAR, permitiendo que un archivo aparentemente legítimo ejecute un payload cuando la víctima lo extrae. Comando recomendado root@kitploit: python3...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 suffers from an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint. The backend fails to validate session cookies (a single Cookie: -http-session-=NOT_VALID header bypasses authentication), and the firmware install proce...

EUVD-2026-71267

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

sec_review_cve-2024-3094

Был проведен полный security review уязвимости CVE-2024-3094 с открытым исходным кодом. На основании полученных данных подготовлены: 1. Отчёт «ThreatModel + SecurityReview» – детальное описание угроз, пути эксплуатации, оценка риска и рекомендации по уменьшению поверхности атаки. 2. Пакет...

bitbucket-test

Docker container to investigate CVE-2022-36804 Recreating a remote code execution vulnerability where Bitbucket fails to sanitize user input, which allows attackers to inject Git flags and execute code remotely. This repository documents how I reproduced the vulnerability CVE-2022-36804, an issue...

Winrar-Exploit-CVE-2023-38831

WinRAR 漏洞利用构建器 WinForms / .NET Framework WinRAR 版本低于 6.23 概述 此存储库包含一个用 C .NET Framework 4.8 编写的小型 Windows 桌面/控制台实用程序，演示了安全研究领域中常讨论的存档结构技术 。 关于 CVE-2023-38831 高层概述 该项目在网上常与 CVE-2023-38831 关联，该漏洞是 WinRAR 的一个问题，其中特制的存档可导致用户在与看似无害的文件交互时运行意外内容 。 影响（概念性） ：社会工程 + 令人困惑的存档内容可导致执行用户未预期的内容。 应对措施 ：将 WinRAR...

CVE-2026-85588

phpMyFAQ versions before 4.1.8 embed live TOTP shared secrets in plaintext inside user data export ZIP files. An attacker who obtains an exported archive can extract the TOTP seed and generate valid one-time codes, effectively bypassing two-factor authentication . The CVSS 4.0 base score is 5.3 (...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ VULNERABILIDAD CRÍTICA - Explotación Activa Confirmada CVE-2025-6218 es una vulnerabilidad crítica de path traversal en WinRAR que permite la ejecución de código arbitrario. Actualmente explotada por grupos APT como GOFFEE, Bitter APT-C-08 y Gamaredon. 📋...

-CVE-2025-8088

-CVE-2025-8088 Script de PowerShell para comprobar si tu dispositivo está afectado o no 🚨 ¡Alerta de CVE-2025-8088: WinRAR Zero-Day! 🚨 Una vulnerabilidad crítica de WinRAR CVE-2025-8088 está dando de qué hablar: los atacantes pueden explotar esta falla en versiones 7.13 para ejecutar código...

binwalk

Binwalk Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images. EOL notice This fork was born to fix some outsanding issues with binwalk v2 and generally to keep it in good shape. It served his purpose helping users and distro packagers alike...

malware-samples

Malware Samples This repository is intended to provide access to a wide variety of malicious files and other artifacts. All of the samples are in a password protected ZIP archive using a password of: infected Malware Analysis Exercises In addition to providing artifacts from samples, I will...

XnlReveal

Acerca de - v4.5 Esta es una extensión para Chrome/Firefox que puede hacer lo siguiente: Para hosts que están en el alcance: Mostrar una alerta para cualquier parámetro de consulta que se refleje e identificar parámetros "sus". Opcionalmente, comprobar si los caracteres ', " y se reflejan sin est...

DFIRArtifactMuseum

DFIR Artifact Museum Description The DFIR Artifact Museum is a community-driven archive of DFIR-related artifacts. It was created to provide a centralized location for examples of artifacts from various operating systems. Purpose To increase accessibility to sample artifacts without individual...

Linux Distros Unpatched Vulnerability : CVE-2026-85396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparis...

CVE-2026-85396

A flaw was found in rubyzip. This path traversal vulnerability in the Zip::Entryextract function allows a remote attacker to craft malicious archive entries. By failing to properly validate extraction paths, the vulnerability enables an attacker to write files outside the intended extraction...

CVE-2026-85396 rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...