LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336 : Détection d'une exploitation RCE Zero-Click OLE Windows Ce dépôt documente mon enquête sur une alerte LetsDefend impliquant une exploitation RCE zero-click OLE Windows liée à CVE-2025-21298. L'objectif est de montrer le raisonnement derrière la conclusion, du triage des e-mail...

CVE-2024-39929

Эксплойт PoC для Exim CVE-2024-39929 Этот репозиторий содержит скрипт Proof-of-Concept PoC для эксплуатации уязвимости Exim CVE-2024-39929. Уязвимость затрагивает версии Exim до 4.98, позволяя злоумышленникам обходить механизмы блокировки расширений файлов и потенциально доставлять исполняемые...

CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-94278

The File Media Renamer WordPress plugin (versions

CVE-2026-34213

CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Intro I identified, responsibly disclosed, and reproduced a High-severity authorization flaw in Docmost , the...

CVE-2026-105633

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633

The open-source project management tool Plane is vulnerable to an authorization bypass in the V2 issue-attachment PATCH endpoint prior to version 1.4.0 . The root cause is that the server accepts an issue_id in the URL but fails to include it in the database query, matching only on pk, workspace,...

EUVD-2026-92547

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2025-32432

CVE-2025-32432 Craft CMS 사전 인증 RCE PoC Craft CMS의 치명적인 사전 인증 원격 코드 실행 영향: Craft CMS 3.x, 4.x 및 5.x 5.6.16까지 정보: 이 익스플로잇은 HackTheBox Orion 머신에서 테스트되었습니다. 개요 이 저장소는 CVE-2025-32432 에 대한 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Craft CMS의 치명적인 사전 인증 원격 코드 실행 취약점입니다. 이 취약점은 인증되지 않은 공격자가 Yii2의 동작 첨부 메커니즘과 class 오버라이...

CVE-2025-65318-and-CVE-2025-65319

PoC для CVE-2025-65318 и CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: При использовании функции взаимодействия с вложениями Canary Mail 5.1.40 и ниже сохраняет документы в файловую систему без тега Mark-of-the-Web, что позволяет злоумышленникам обходить встроенные механизмы защиты файлов как ОС...

CVE-2020-12625

CVE-2020-12625: Межсайтовый скриптинг через вредоносное HTML-вложение в Roundcube Webmail Уязвимость межсайтового скриптинга XSS существует в версиях Roundcube до 1.4.4, 1.3.11 и 1.2.10. Используя XML-элемент "" в письме с вложением "text/html", злоумышленник может обойти фильтр скриптов Roundcub...

CVE-2025-25279-Mattermost-Path-Traversal

🔥 CVE-2025-25279 — Mattermost 10.4.1 📤 Path Traversal dans Focalboard permettant l’exfiltration de fichiers 🌟 Présentation Cette preuve de concept démontre l’exploitation de la vulnérabilité CVE-2025-25279 affectant Mattermost 10.4.1. Une faille dans Focalboard le module de gestion de tableaux...

xll_windows_reverse_shell

xllwindowsreverseshell Реверс-шелл Windows xll На вашей атакующей машине Kali: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Обновите revsh.ps1 2. Запустите Python HTTP-сервер python3 -m http.server 9999 На вашей атакующей машине Windows: 1. Переместите notpadXLL.c на вашу...

CVE-2026-105099

A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

CVE-2021-38295-PoC

CVE-2021-38295-PoC Простой прототип на Python для CVE-2021-38295. Связанная запись в блоге Ссылка на блог Использование: Usage: cve-xxxx Просто передайте скрипту хост, базу данных, к которой у ваших учетных данных есть доступ, и пару имя пользователя:пароль. Если всё работает, вы получите URL,...

CVE-2026-105099 Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting

A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

EUVD-2026-92070

A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

CVE-2026-105099

A cross-site scripting (XSS) vulnerability exists in the Ticket Attachment Upload component of Omega Solution CoinEx Crypto 2025 . The flaw originates from an unknown functionality within the /user/ticket file, allowing for remote manipulation. While the product website is no longer active and th...