THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 THMルーム「Vulnerability Capstone」& CVE-2018-16763のエクスプロイトスクリプトに関する解説。 クレジット 私はこの脆弱性の発見について功績を主張しません。以下の方々に感謝します。 脆弱性発見: 0xd0ff9 TryHackMe ルーム & 作者: https://tryhackme.com/room/vulnerabilitycapstone https://tryhackme.com/p/cmnatic 参考文献:...

CVE-2022-0236

CVE-2022-0236 The WP Import Export WordPress plugin is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpieprocessfiledownload found in the /includes/classes/class-wpie-general.php file. This made it possible for unauthenticated...

AntiCropalypse

March 31st, 2023 Update As of today, Discord's CDN now strips trailing data from PNGs in-flight, meaning that even old uploads are now safe from the aCropalypse vulnerability. As such, this bot is no longer necessary, but it will remain online to allow users to download their archived images. The...

CVE-2026-103766 ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter

ClipBucket v5 through 5.5.3-197 contains an sql injection vulnerability that allows authenticated users with admanageraccess permission to inject SQL via the delete parameter in adminarea/adsmanager.php. Attackers can supply time-based blind payloads concatenated into AdsManager::DeleteAd queries...

CVE-2026-103766

ClipBucket versions v5 through 5.5.3-#197 are vulnerable to an SQL injection vulnerability. The issue resides in the admin_area/ads_manager.php file, where authenticated users with ad_manager_access permissions can inject SQL via the delete parameter . By supplying time-based blind payloads conca...

CVE-2023-22527

CVE-2023-22527 - Confluence Data Center および Confluence Server における RCE リモートコード実行 の脆弱性 PoC 検出 nuclei -v -t /path/to/template.yam; -u http://ip:port/ エクスプロイト python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR 概念実証 PoC-Exploit このリポジトリには、CVE-2025-8088 の概念実証 PoC スクリプトが含まれています。これは、7.12 までの WinRAR に影響を与えるパストラバーサル脆弱性です。 この PoC は、攻撃者が代替データストリーム ADS と細工されたアーカイブファイルを使用して、意図された展開ディレクトリの外部に悪意のあるファイルを配置する方法を示しています。 免責事項:...

Cyber-Attack-Analysis

Cybersecurity Case Study: The 2020 Virgin Mobile KSA Breach 📌 Executive Summary In 2020, a significant security incident compromised Virgin Mobile KSA, leading to the theft of sensitive data including employee communications and personal information of over 1,000 users. This repository provides a...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Path traversal vulnerability in Python's tarfile module affecting versions 3.8.0 through 3.13.1. The filter="data" sandbox — intended to prevent unsafe extractions — can be bypassed by crafting paths that exceed PATHMAX 4096 bytes, causing...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-51894

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via runmindmap. A reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object...

CVE-2026-51893

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via tracemindmap. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2021-22555-Poc

Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...

CVE-2026-34494

A vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . The issue is associated with CWE-1191 (On-Chip Debug and Test Interface With Improper Access Control). The CVSS 4.0 scor...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-34493

A vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . This issue is associated with CWE-1191 , involving an On-Chip Debug and Test Interface with Improper Access Control . The vu...