CVE-2015-3306-Home-Lab

АНГЛИЙСКАЯ ВЕРСИЯ НИЖЕ ProFTPD 1.3.5 modcopy — Лаборатория симуляции RCE Эта лаборатория разработана для имитации уязвимости CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE Предназначена для изучения Web Shell Injection RCE через модуль modcopy ProFTPD. Особенности ProFTPD 1.3.5 с...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 프로젝트 개요 이 소프트웨어는 Linux CVE-2026-31431 취약점을 테스트하는 도구를 제공합니다. Rust 프로그래밍 언어를 사용하여 시스템 파일과 상호 작용합니다. 이 프로그램은 사용자가 대상 시스템에서 맞춤형 셸코드를 실행할 수 있게 해줍니다. 이 도구는 보안 연구자들이 자신의 Linux 환경이 파일 복사를 올바르게 처리하는지 확인하는 데 도움을 줍니다. Linux 커널 복사 메커니즘에서...

tscopy

TScopy Обновлено 2022-03-31 Введение в TScopy Во время расследования инцидентов IR часто требуется возможность анализировать файлы в файловой системе. Иногда эти файлы заблокированы операционной системой ОС, поскольку используются, что особенно раздражает в случае журналов событий и кустов реестр...

CVE-2018-0952-SystemCollector

SystemCollector Windows 10 Diagnostics Hub Standard Collector Service의 권한 상승을 위한 PoC 영향을 받는 제품 Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 요약 Windows 표준 수집기 서비스에서 사용되는 Diagnostics Hub 패키징 라이브러리는 DiagnosticsHub.StandardCollector.Runtime.dll의 클라이언트...

CVE-2020-17518

Уязвимость обхода каталога в Apache Flink, позволяющая читать/записывать удалённые файлы через REST API Номер уязвимости: CVE-2020-17518 Описание уязвимости: CVE-2020-17518: запись удалённых файлов через REST API Затронутые версии: Flink 1.5.1 – 1.11.2 Безопасные версии: Flink 1.11.3 или Flink...

CVE-2019-12815

CVE-2019-12815 Scanner di massa per ProFTPd modcopy - copia arbitraria di file senza autenticazione...

cpx_proftpd

cpxproftpd PoC di Daniel Aldana per lo sfruttamento di CVE-2015-3306. Bug segnalato da Vadim Melihow. METODO 1: uso: root@kitploit: python cpxproftp.py es: root@kitploit: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt poi prova: root@kitploit: http://127.0.0.1/pass.txt METODO 2: uso:...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Remote-Befehlsausführung ProFTPD ist ein hochgradig konfigurierbarer FTP-Daemon für Unix und Unix-ähnliche Betriebssysteme. ProFTPD entstand aus dem Wunsch nach einem sicheren und konfigurierbaren FTP-Server. Es wurde von einer großen Bewunderung für den Apache-Webserver...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-Schwachstellenanalyse-Vorfallreaktionsbericht Reale Simulation: FTP-Dienstausnutzung ProFTPD CVE-2015-3306 Reale Simulation: FTP-Dienstausnutzung ProFTPD CVE-2015-3306 📌 Überblick Dieses Projekt demonstriert einen vollständigen Arbeitsablauf von Schwachstellenbewertung und Vorfallreaktion...

OnlyOffice-path-traversal

Exploração de Path Traversal no ONLYOFFICE CVE-2023-46988 📌 Visão Geral Este script explora uma vulnerabilidade de path traversal no ONLYOFFICE Document Server CVE-2023-46988 que permite que usuários não autorizados copiem arquivos arbitrários do servidor. A vulnerabilidade existe no endpoint...

CVE-2015-3306

CVE-2015-3306 ProFTPD Exploit Dieses Repository enthält einen Python-Proof-of-Concept PoC-Exploit für CVE-2015-3306 ⚠️ Warnung: Verwenden Sie dies nur gegen Systeme, die Ihnen gehören oder für die Sie eine ausdrückliche Testgenehmigung haben. Unbefugte Ausnutzung ist illegal. Autor Mohamed...

CVE-2015-3306

CVE-2015-3306 Este contém um exploit de arquivo único para a vulnerabilidade ProFTPd 1.3.5 modcopy CVE-2015-3306, especialmente para o TryHackMe Kenobi Lab. Descrição da Vulnerabilidade CVE-2015-3306 é uma vulnerabilidade encontrada no ProFTPd 1.3.5 devido a uma falha no módulo modcopy , que é...

CVE-2026-15012

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-15012

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-15012

The CVE concerns the WordPress plugin Demi – One Click Demo Import, WP Backup & Site Migration . It is affected through an Arbitrary Directory Copy vulnerability in all versions up to and including 0.0.8, exploitable via the handle_restore_step function. The flaw arises from missing HTTP access c...

EUVD-2026-49691

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

PT-2026-65396

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handle restore step function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

SUSE CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTLDUPLICATEEXTENTSTOFILE passes the source file directly to vfsclonefilerange or vfscopyfilerange without checking the SMB access mask granted to the source handle. A...

CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTLDUPLICATEEXTENTSTOFILE passes the source file directly to vfsclonefilerange or vfscopyfilerange without checking the SMB access mask granted to the source handle. A...