10810 matches found
CVE-2026-115906
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the attacker-controlled data counter reaches zero. If the underlying bounded reader reaches the real end of the archive while...
CVE-2026-115906
The zip library for Rust (versions 0.6.0 through 9.0.0 ) contains a vulnerability in the AES entry reader (src/aes.rs). The component fails to verify the HMAC authentication tag if the archive reaches the end of the stream while the data counter is still positive, or if an encrypted entry lacks a...
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize on stored entry meta...
spybrowse
BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...
CVE-2025-25460
FlatPress CMS Stored XSS in v1.3.1 CVE-2025-25460 Author: Athul S Description A stored Cross-Site Scripting XSS vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts...
disable-RegisterSpoolerRemoteRpcEndPoint
disable-RegisterSpoolerRemoteRpcEndPoint Workaround for Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527. See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft released a patch Microsoft already released a patch for this...
DOCxNGINxFX
WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...
PageTableInjection
PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...
CVE-2021-40444-Sample
CVE-2021-40444-Sample CVE-2021-40444 Sample...
RedTeam-Physical-Tools
Red Team – Physical Security – Covert Entry – EDC A curated list of commercially available tools commonly referenced in authorized physical security assessments, red teaming, and covert entry training. Legal & Ethics: Use only with written authorization and in accordance with local laws. Many too...
Driver-HideKernelThread-IoCancelIrp
Driver-HideKernelThread-IoCancelIrp not my code. only for saving https://bbs.pediy.com/thread-272795.htm Principle Set the thread entry address to IoCancelIrp and the context to the irp you created. Then the thread will call IoCancelIrp. when called, will perform the operation of canlcelling the...
CVE-2019-3396TEST
CVE-2019-3396TEST TEST...
firstexecution
firstexecution Collection of different ways to execute code outside of the expected entry points...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
CVE-2026-116208
YesWiki versions 4.6.2 before 4.7.0 are vulnerable to a missing authorization flaw in the ActivityPubService::syncActorPosts component. This issue allows malicious ActivityPub servers to manipulate the mirrored entries of other actors. During an admin-initiated sync, an attacker can provide a poi...
EUVD-2026-109466
YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers manipulate other actors' mirrored entries. Attackers can serve a poisoned outbox with cross-actor Delete, Update, or Create activities durin...
CVE-2023-3640
SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...
CVE-batdappboomx
CVE ID CVE-2022-27134 PRODUCT batdappboomx is a public smart contract running in the EOSIO blockchain. This smart contract rewards cryptocurrency to its participants if they pay some cryptocurrency before. Version The latest version of this smart contract. The sha256 hash code of the smart contra...
CVE-2026-116137
adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries check by using canonically equivalent entry names like './hello.txt' and 'hello.txt'. Attackers can craft ZIP archives where getEntry or readAsText validates benign content while...