266314 matches found
CVE-2026-54415-PoC
CVE-2026-54415 β Azuriom CMS Broken Access Control β Account Takeover Missing authorization on the admin server-management routes in Azuriom CMS This PoC is published for defensive and educational purposes against a patched version. Only run it against systems you own or are explicitly authorized...
CVE-2025-25614
CVE-2025-25614 Incorrect Access Control in Unifiedtransform v2.0 leads to Privilege Escalation, allowing teachers to update the personal data of fellow teachers. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint: /teachers/edit/3...
Powershell-C2
Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...
cloudpanel-2.4.2-CVE-2024-44765-recovery
CVE-2024-44765 is an Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel versions 2.0.0 to 2.4.2 1. Follow instructions in every folder this should be done locally 2. Reset Passwords and Access for root $ sudo passwd root while for users $ getent...
confluence-cve-2023-22515
confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...
quasibot
quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...
CVE-2023-49981
CVE-2023-49981 School Fees Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...
CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl
CVE-2026-56423 β MISP deleteSelection Broken Access Control Proof of concept for a missing-authorization flaw in MISP's bulk deletion flows for Event Reports and Sharing Groups. The deleteSelection handlers authorize each selected item with a callback that ignores the item and returns the caller'...
Malcolm
Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use β Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...
twittor
Twittor A stealthy Python based backdoor that uses Twitter Direct Messages as a command and control server This project has been inspired by Gcat which does the same but using a Gmail account. Setup For this to work you need: A Twitter account Use a dedicated account! Do not use your personal one...
CVE-2026-33146
CVE-2026-33146 A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages hidden from public share viewers could still leak through public share search results. Intro I found this issue while reviewing Docmost , an open-source...
CVE-2026-48907
π¨ CVE-2026-48907 - JCE Joomla Content Editor Unauthenticated Remote Code Execution β οΈ Critical Unauthenticated RCE in JCE Joomla Content Editor A critical access control vulnerability allowing unauthenticated attackers to compromise vulnerable Joomla installations running JCE. π Overview...
Malware
Malware macOS Malware Collection β οΈ This page contains links to live malware! By downloading malware from this site, you waive all rights to claim any damages resulting from mishandling or self-infection. π‘ Running the samples, may results in connections to attack controlled infrastructure e.g...
uhubctl
uhubctl uhubctl is utility to control USB power per-port on smart USB hubs. Smart hub is defined as one that implements per-port power switching. Original idea for this code was inspired by hub-ctrl.c by Niibe Yutaka: https://www.gniibe.org/development/ac-power-control-by-USB-hub Compatible USB...
f32
The f32 is an ultra-compact ESP32 development board designed to mount directly behind a USB-C receptacle. The PCB measures just 9.85 mm x 8.45 mm. It's powered by the ESP32-C3FH4 microcontroller and was created primarily for research and as a bit of a stress test for the ESP32, since it...
RedGuard
RedGuard - Excellent C2 Front Flow Control tool English | δΈζζζ‘£ 0x00 Introduction What is RedGuard RedGuard, a derivative tool based on command and control C2 front flow control technology, has a lighter design, efficient traffic interaction, and reliable compatibility with development in the go...
CVE-2018-17456
CVE-2018-17456 Vulnerability Overview Vulnerability Name: Git Input Validation Error Vulnerability CNNVD ID: CNNVD-201810-234 Hazard Level: Critical CVE ID: CVE-2018-17456 Vulnerability Type: Input Validation Error Published Date: 2018-10-08 Threat Type: Remote Updated Date: 2019-04-25 Vendor:...
SSHPry2.0
SSHPry2.0 This is a second release of SSHPry tool, with multiple features added. Control of target's TTY Built-In Keylogger Console-Level phishing Record & Replay previous sessions Demo: https://youtu.be/2gfnBvu1u34 Blogpost: http://www.korznikov.com/2017/09/sshpry-v2-spy-control-ssh-connected.ht...
npcap
Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...
katana
A next-generation crawling and spidering framework Features β’ Installation β’ Usage β’ Scope β’ Config β’ Filters β’ Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...