cve-2015-0313

CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

sheepl

sheepl Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments Introduction There are lots of resources available online relating to how you can build AD network environments for the development of blue team and red team tradecraft. However the...

Invoke-Obfuscation

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

CVE-2021-26700

CVE-2021-26700 Note: this manual is valid for DSNS lab's members only. Intruduction This is a remote code execution RCE vulnerability that resided in an extension of Visual Studio Code VS Code called npm, which was developed by Microsoft and was aimed to support running the npm scripts defined in...

CGA-9Q7F-6XH5-37F7

Bulletin has no description...

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE Scanner — CVE-2026-39808 Unauthenticated OS Command Injection as root in Fortinet FortiSandbox Vulnerability • Installation • Usage • How It Works • Pipeline • Shodan Dorks • Disclaimer Vulnerability CVE-2026-39808 is a critical unauthenticated OS command injection vulnerability ...

agentZ

AgentZ Zero Trust Agentic AI Platform Build, run, and govern AI agents. Secure by design. Every agent runs inside a default-deny sandbox and never receives a credential. Every agent action is traceable. AgentZ is a multi-tenant platform for running AI agents. It provides strong isolation...

CVE-2019-15107

Webmin applications for versions 1.890 and below are vulnerable to Unauthenticated Remote Code Execution. CVE-2019-15107. Reference : https://github.com/foxsin34/WebMin-1.890-Exploit-unauthorized-RCE...

EUVD-2026-75124

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-73787

HPE CPPM (Campus Policy Manager) contains a vulnerability in its web interface that allows an authenticated remote attacker to access directory information on the system, which can escalate to arbitrary command execution on the underlying operating system via an arbitrary file write mechanism (as...

CVE-2026-73787 Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-73787 Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability

CVE-2026-21020 – Protobuf Message Parsing Polymorphic Deserialization Vulnerability Program Code Python with protobuf root@kitploit: protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl from google.protobuf...

MultiPotato

MultiPotato First of all - credit to @splintercode & @decoderit for RoguePotato as this code heavily bases on it. This is just another Potato to get SYSTEM via SeImpersonate privileges. But this one is different in terms of It doesn't contain any SYSTEM auth trigger for weaponization. Instead the...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Penetration Testing Report 2FA Bypass Vulnerability in Really Simple SSL Plugin 📋 Table of Contents Executive Summary Target Information Methodology Timeline Reconnaissance Phase Vulnerability Analysis Attack Flow Exploitation Impact Assessment Remediation Tools Used...

socksmon

socksmon Monitor arbitrary TCP traffic using your HTTP interception proxy of choice What is socksmon? socksmon is a SOCKSv4 server based on Twisted, that tunnels incoming TCP traffic through an HTTP proxy. socksmon does this by starting an internal webserver on port 2357, posts the traffic to usi...

CVE-2026-73769 Authenticated Remote Code Execution in CPPM Web Interface

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

EUVD-2026-75122

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-73769

CVE-2026-73769 affects the web-based management interface of HPE CPPM systems. An authenticated remote attacker with high-level privileges can achieve remote code execution , allowing arbitrary command execution on the underlying operating system. The CVSS 3.1 score is 7.2 (HIGH) with a vector of...