java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

ADSearch

ADSearch Uno strumento scritto per il comando execute-assembly di cobalt-strike che consente query più efficienti su AD. Caratteristiche principali Elenca tutti gli Amministratori di Dominio Ricerca LDAP personalizzata Connessione a server LDAPS Output di dati JSON da istanze AD Recupero di...

Inline-Execute-PE

Inline-Execute-PE DICHIARAZIONE DI NON RESPONSABILITÀ: Questo progetto è complesso e la mancata comprensione del suo funzionamento e un test adeguato possono causare il crash dei Beacon e la perdita di accesso! Ti consiglio vivamente di leggere tutta la documentazione fino alla sezione...

EUVD-2026-67807

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...

EUVD-2026-67798

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-82267

Komodo (through version 2.3.2) contains a logic flaw in the /execute and /execute/{variant} API handlers, where internal resource identifiers are disclosed and audit log entries are written before permission checks are evaluated. Authenticated users can exploit this by guessing resource names to ...

CVE-2026-82267 Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

RedPersist

RedPersist RedPersist è uno strumento di persistenza per Windows scritto in C Compilazione del Progetto Di seguito sono elencate le librerie di terze parti utilizzate in questo progetto. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Carica il progetto di...

CVE-2022-39196-

CVE-2022-39196 Blackboard CMS – Berechtigungserweiterung Blackboard Learn Version 1.10.1 ermöglicht es remote authentifizierten Benutzern, unbeabsichtigte Dateien zu lesen, indem sie Studentenanmeldeinformationen eingeben und dann direkt eine bestimmte webapps/bbcms/execute/ URL aufrufen...

VvvebJs < 1.7.5 - Arbitrary File Upload

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php. id: CVE-2024-29272 info: name: VvvebJs 1.7.5 - Arbitrary File Upload author: s4e-...

Jan v0.4.12 - Arbitrary File Upload

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-36858 info: name: Jan v0.4.12 - Arbitrary File Upload author: pussycat0x severity: critical description: | An arbitrar...

mooSocial v.3.1.8 - Cross-Site Scripting

Cross-Site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function. id: CVE-2023-44813 info: name: mooSocial v.3.1.8 - Cross-Site Scripting author: ritikchaddha severity:...

CVE-2025-9223

Applications Manager - PoC di Bypass dell'Azione di Esecuzione Programmi 📖 Descrizione Questo repository contiene una Prova di Concetto PoC che dimostra una vulnerabilità di esecuzione di comandi nella funzione "Execute Program Action" di ManageEngine Applications Manager. 🔍 Dettagli della...

CVE-2018-17961

Das Image erstellen Den Container mit Portweiterleitung ausführen Per ssh -X darauf verbinden evince executeonlybypass.ps ausführen Überprüfen, ob der Exploit in /.bashrc geschrieben hat...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

toastnotify-bof

toastnotify-bof Un Beacon Object File BOF per inviare notifiche toast di Windows. Si abbina al post del blog per il contesto completo e i casi d'uso. sottocomandi getaumid Enumera gli AUMID Application User Model ID registrati sul sistema. Usalo per trovare un'identità adatta da prendere in...

execute-assembly-pico

Execute Assembly PICO Un PICO per Crystal Palace che implementa l'hosting nativo del CLR per eseguire un assembly .NET aggiunto in memoria, usando la stessa tecnica del generatore di shellcode donut. Questo ti permette di caricare strumenti .NET come Rubeus o Seatbelt da codice indipendente dalla...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fixed a use-after-free bug in smpexecutetasksg When executing an SMP task fails, the smpexecutetasksg function calls deltimer to delete the “slowtask-timer” timer. However, if the timer handler sastaskinternaltimedo...