CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2017-9779

Automatic execution Payload From Windows By Path Users :: What is ? Cmder Cmder is a software package created out of pure frustration over the absence of nice console emulators on Windows. It is based on amazing software, and spiced up with the Monokai color scheme and a custom prompt layout,...

Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638

Modded-Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638-AUTO-EXPLOITER...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

EUVD-2026-96773

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

CVE-2026-88785

The Simple Membership WordPress plugin, in versions before 4.8.3 , is vulnerable to credential exposure. When the optional auto-login-after-registration feature is enabled, the plugin transmits a newly registered member's plaintext password within a URL query string . This exposure allows anyone ...

sharesniffer

sharesniffer sharesniffer es una herramienta de análisis de red para encontrar recursos compartidos de archivos abiertos y cerrados en tu red local. Incluye descubrimiento automático de red y montaje automático de cualquier recurso compartido cifs y nfs abierto. Cómo usar Ejemplo para encontrar...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass Educational PoC This repository provides an educational proof of concept for CVE-2026-9198 affecting IBM Langflow OSS. The PoC poc.py demonstrates how an unauthenticated attacker can chain: 1. GET/POST /api/v1/autologin return...

pacbot

Introducción Policy as Code Bot PacBot es una plataforma para la monitorización continua del cumplimiento normativo, la generación de informes de cumplimiento y la automatización de la seguridad en la nube. En PacBot, las políticas de seguridad y cumplimiento se implementan como código. Todos los...

CVE-2026-88785: Exposure of Sensitive Information to an Unauthorized Actor

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

vulnx

VulnX Vulnx 🕷️ es un Bot Inteligente Auto Inyector de Shell que detecta vulnerabilidades en múltiples tipos de CMS https://github.com/anouarbensaad/vulnx/archive/master.zip Wiki de VulnX • Cómo Usar • Compatibilidad • Biblioteca • Vulnx es un Bot Inteligente Auto Inyector de Shell que detecta...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

CVE-2022-25845-exploit

CVE-2022-25845-exploit Try exploiting this CVE by studying some articles: https://jfrog.com/blog/cve-2022-25845-analyzing-the-fastjson-auto-type-bypass-rce-vulnerability/ https://www.freebuf.com/vuls/339752.html This is my analyze:...

cuckooautoinstall

Informazioni su CuckooAutoinstall Cuckoo Sandbox . script di auto installazione Cos'è Cuckoo Sandbox? Cuckoo Sandbox è un sistema di analisi malware. Cosa significa? Significa che puoi passargli qualsiasi file sospetto e ottenere un report con i dettagli sul comportamento del file in un ambiente...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

CVE-2021-36934

CVE-2021-36934 Explotador automático de SeriousSAM Requisitos HiveNightmare, ejecutable o un equivalente en DLL del mismo el equivalente en DLL requeriría algunas modificaciones de código para ejecutarlo mediante rundll32, esto podría ser útil cuando te encuentres con entornos applocker. dump.exe...

CVE-2026-108160

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack LPE Exploit Information| ---|--- Date| 15.01.2018 Patched| Windows 10 20H1 19041 exploit-db| 44830 Tested on| Windows 8-10, x86/x64 independent Description slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. Read access to...

CVE-2026-108160

The AstronRPA desktop client (versions through 1.1.6 ) is vulnerable to a download of code without integrity check (CWE-494). The electron-updater component fails to perform signature verification when fetching updates via a plain-HTTP feed . A network attacker positioned between the client and t...

CVE-2026-108160 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...