CVE-2022-3699

CVE-2022-3699 Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Thank you to ch3rn0byl for helping with this and I totally 100% ripped two of his functions. Explanatio...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

CVE-2023-33782

CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...

Shellcode-Test-Harness

Shellcode Test Harness A lightweight test harness designed to speed up shellcode development by providing an execution environment with integrated crash diagnostics and debug output redirection. Features Executes shellcode via module stomping Uses VEH to catch crashes: If the shellcode faults, it...

NETworkManager

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

CVE-2018-0952-SystemCollector

SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...

mtr

MTRとは？ mtrは、'traceroute' と 'ping' プログラムの機能を1つのネットワーク診断ツールに統合したものです。 mtrが起動すると、mtrが実行されているホストとユーザーが指定した宛先ホストとの間のネットワーク接続を調査します。 プローブを、Time-to-Live値を順次大きくしながら宛先に送信し、途中のルーターからの応答を使用して経路を発見・測定します。 その際、各ホップの実行中の統計情報を表示します。...

rack-bug

Rack::Bug Code Climate Repository: http://github.com/brynary/rack-bug Description Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based...

pfsense-security-research

Lectura Arbitraria de Archivos Autenticada en pfSense 2.8.0 a través de la Interfaz Web de Diagnóstico ID de CVE: CVE-2025-53392 Fecha: 2025-06-27 Autor: Seth Kraft Página web del proveedor: https://www.netgate.com/ Registro de cambios del proveedor:...

ztewaste

ZTE 诊断转储概念验证 利用 CVE-2022-38694 从紫光展锐 ZTE 设备中提取大量用户信息。 !CAUTION 请不要在这里使用永久链接！！！ 仓库名称未来几乎肯定会变更。请改为提供指向我博客上文章撰写的链接。 文章撰写 文章撰写可见：https://blog.joshattic.us/posts/2026-05-31-your-zte-phone-is-spying-on-you 使用方法 1. 从 https://github.com/TomKing062/CVE-2022-38694unlockbootloader/releases 下载相应的紫光展锐 BROM...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

CVE-2025-29279

CVE-2025-29279 To exploit this vulnerability, the attacker must insert the payload example.com;echo 'testing' into the "Host Address" in Traceroute6 Diagnostics in the Diagnostics section...

CVE-2026-75165

An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods ugw-ping, ugw-traceroute that are not exposed in the web UI, allowing attackers to obtain sensitive...

CVE-2023-36003-POC

使用 XAML 诊断 API 进行权限提升（CVE-2023-36003） 这是一个使用 XAML 诊断 API 的权限提升漏洞的 POC（概念验证）。该漏洞已在 12 月的补丁星期二中修复，其 CVE 编号为 CVE-2023-36003。 用法 该 POC 是一个 C++ 项目，可以使用 Visual Studio 编译。编译后，无需任何参数即可运行 POC，它会查找一个无法访问的进程，然后对其执行漏洞利用。或者，也可以传入进程 ID 作为参数，漏洞利用将针对该进程运行。 漏洞详情 有关该漏洞的更多详细信息，请参阅以下博客文章： 使用 XAML 诊断 API...

CVE-2026-75165

An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods ugw-ping, ugw-traceroute that are not exposed in the web UI, allowing attackers to obtain sensitive...

EUVD-2026-71449

An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods ugw-ping, ugw-traceroute that are not exposed in the web UI, allowing attackers to obtain sensitive...

CVE-2026-75165

An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods ugw-ping, ugw-traceroute that are not exposed in the web UI, allowing attackers to obtain sensitive...

CVE-2022-30190_Temporary_Fix_Source_Code

🩹CVE-2022-30190 临时修复🩹（源代码） 这些是两个 Python 脚本的源代码，经编译后可轻松快速地针对 CVE-2022-30190 漏洞（Follina） 应用临时保护。 两者都可以编写得更好，但这只是为了尽可能快速地实现它，而且我是在没有太多 Python 知识的情况下完成的，但重要的是…… 它能用！ 嘿嘿 这些 '.exe' 文件有什么用？: 逐步操作（ 'CVE-2022-30190temp-fix.py' CVE-2022-30190temp-fix.exe）： 1. 备份注册表键 'HKEYCLASSESROOT\ms-msdt' 。 2. 删除注册表键...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...