ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈɪmhɛks/...

CVE-2023-22809

Escalada de Privilegios en Linux Exploit para CVE-2021-3560 Sudoedit alias -e - Escalada de Privilegios Local Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original n3m1dotsys Descripción de la Vulnerabilidad En Sudo antes de 1.9.12p2, la funcionalidad...

CVE-2022-42096

Backdrop CMS versión 1.23.0 Explicación de la vulnerabilidad: Se descubrió que Backdrop CMS versión 1.23.0 contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del contenido Post. Vectores de ataque: El atacante debe publicar algo en "Post content" e insertar el payload XSS...

wxHexEditor

wxHexEditor Repositorio GIT oficial de wxHexEditor Para más información: http://www.wxhexeditor.org Instrucciones de compilación ¡Simplemente ejecuta make! Dependencias de compilación en Linux wxgtk;...

CVE-2019-12836

CVE-2019-12836 Aplicación JEditor v3.0.5 - Editor WYSIWYG para JIRA Editor de texto enriquecido simple pero potente para Jira. Importa correos HTML, pega contenido enriquecido, crea plantillas y rellena campos predefinidos. Proveedor del Producto Bobronix Sitio web del proveedor...

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection The JCK Editor Jtreelink plugin for Joomla! fails to correctly parse the user inputs, allowing SQL Injection. This exploit takes advantage of this security flaw and dump the administrators credentials and possibly upload a PHP RCE shell. Exploit Title: Joomla...

sops

SOPS: Operaciones de Secretos SOPS es un editor de archivos cifrados que soporta los formatos YAML, JSON, ENV, INI y BINARY, y cifra con AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age y PGP. demostración .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Investigación: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Análisis d...

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 This repository contains a Proof of Concept PoC demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution RCE...

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig =...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

dnSpy

dnSpyEx dnSpyEx is an unofficial continuation of the dnSpy project which is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and da...

CVE-2025-30406

Part1: Exploit root@kitploit: λ CVE-2025-30406.exe rce.txt...

CVE-2026-82679

An unrestricted file upload vulnerability exists in diem-project/diem (up to version 5.1.3 ), located in the Widget Editor component within the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php. The root cause is an unknown function that fails to properly restrict upload hand...

EUVD-2026-68460

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

EUVD-2026-68435

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

CVE-2026-82666

A code injection flaw exists in yaojingang GEOFlow up to version 2.1.0 , specifically in the preview function of app/Http/Controllers/Admin/SiteThemeEditorController.php within the Superadmin Theme Editor component. Manipulation of the blade argument allows remote code injection. The flaw require...

CVE-2026-48907-

CVE-2026-48907 — Escáner y Exploit de RCE No Autenticado para JCE Editor de Joomla CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% Una herramienta de escaneo y explotación de vulnerabilidades basada en Python para CVE-2026-48907 , una vulnerabilidad crítica de ejecución remota de código no autenticada ...

CVE-2018-20250

CVE-2018-20250-3 Plantilla de 010 Editor para formato de archivo ACE & CVE-2018-20250-3 ace.bt plantilla del editor 010 acefile.py extractor ace de código abierto, utilizado para escribir la plantilla watchme.gif demostración wace269i instalador de WinAce Descargo de responsabilidad: Todos los...

CVE-2026-34212

CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I identified, responsibly disclosed, and reproduced a High-severity stored XSS issue in Docmost , the...