CVE-2019-0986

Security Research for FUN All focused on Microsoft Windows OS CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 This is the PoC I've sent to Microsoft when I reported the above vulnerability This PoC exploits "User Profile Service" ProfSvc.dll. It will...

delete-self-poc

🗑️ delete-self-poc The delete-self-poc is a demonstration of a method to delete a locked executable or currently running file from disk. This concept was initially discovered by Jonas Lykkegaard, and I have created the proof of concept POC for it. Additionally, it can be used to delete locked file...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Execute various actions on a target web server...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

BitLock-Crypto-Research

🛡️ BitLock Framework: Cryptovirology and C2 Ecosystem PoC This repository contains a comprehensive Proof of Concept PoC designed for the study of modern threat architectures. The project simulates a fileless attack environment with a command and control C2 infrastructure protected by elliptic curv...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

BeatRev

BeatRev Versión 2 Descargo de responsabilidad / Responsabilidad El trabajo que sigue es un POC para permitir que el malware se "vincule" a una víctima particular con el fin de frustrar los esfuerzos de los analistas de malware. No asumo ninguna responsabilidad por el uso malicioso de cualquier id...

CVE-2022-31295

CVE-2022-31295 Online Discussion Forum Site 1.0 - IDOR / Delete any post Exploit Title: Online Discussion Forum Site 1.0 - IDOR / Delete any post Date: 2022-06-13 CVE: CVE-2022-31295 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

CVE-2026-81648

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81648 CVE-2026-81648 CryptoPayment Gateway 1.2.2 - Granwill I am @abraxasnull. Loopback lab. The client is CVE-2026-81648-Abraxas-Labs.py. The guard is never called. Direct POST vendor/cryptd/ajax.php, not...

YT-Spammer-Purge

YouTube Spammer Purge ¿Qué es esto? - Permite filtrar y buscar comentarios de spam en tu canal y en canales ajenos de muchas formas diferentes, y eliminarlos/reportarlos todos a la vez consulta las funciones más abajo. Cómo descargar: Haz clic en el enlace "Releases" a la derecha, luego en la...

CVE-2023-21752

CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...

CVE-2024-23773

CVE-2024-23773 - Arbitrary File Delete Vulnerability Information will follow in due course...

Keylogger

Inputs To Mail. キーボード、マウス、スクリーンショット、マイク入力を取得し、あなたのメールに送信します。 このプロジェクトの目的は、情報システムのセキュリティをテストすることです。 インストール インストールのために何もする必要はありません。スクリプトを実行するだけです。 使用方法 •一時メールを使用して「https://mailtrap.io/」にアカウントを作成してください。 •「keylogger.py」に自分のSMTPユーザー名とSMTPパスワードを設定してください。 •pip install -r requirements.txt •python3...

ransomware-simulator

QuickBuck - Simulador de Ransomware / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH El objetivo de este repositorio es proporcionar una forma simple e inofensiva de verificar la protección de tu antivirus contra ransomware. Esta herramienta...

CVE-2023-20178

CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...

CVE-2024-34471

CVE-2024-34471 Description: An authenticated user can abuse a Path Traversal vulnerability resulting in file deletion if has write permissions in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an...

CVE-2023-40362

CVE-2023-40362 CVE-2023-40362 vulnerabilitiy details and proof-of-concept. Overview An access control vulnerability in Click2Gov BP at the URI /Click2GovBP/mastercontractorlist.html leads to the ability for authenticated users to delete the contractors from the accounts of other users with the...