LocalNet_Attacker

LocalNetAttacker Esta es una herramienta de ataque a redes locales basada en Java. Con esta herramienta puedes atacar o recopilar información sobre los sistemas Windows objetivo que están conectados contigo en la misma red. Características Obtener detalles de IP Obtener detalles del sistema Ataqu...

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 Authenticated Older versions likely affected https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ Herramienta de Explotación de WinRAR CVE-2025-8088 ☠️ ACCESO AL SISTEMA: CONCEDIDO OBJETIVO: VULNERABILIDAD DE WINRAR Una sofisticada herramienta GUI de nivel militar diseñada para crear archivos RAR maliciosos que explotan la vulnerabilidad de path traversal de WinRAR CVE-2025-8088. Esta...

WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion

The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute...

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...

shepard

SHEPARD BITS Esta es una herramienta de persistencia que utiliza el Servicio de Transferencia Inteligente en Segundo Plano de Windows BITS. Funcionalidad Descarga de archivos, Exfiltración de archivos, Descarga de archivos + Ejecución persistente Uso Ejecute shepard.exe como Administrador con los...

CVE-2018-6546-Exploit

CVE-2018-6546 POC 利用 这是针对 Plays.tv 服务 playsservice.exe 版本 1.27.5.0 及更早版本的概念验证利用。 有关该漏洞的更多详细信息，请访问： https://www.securifera.com/advisories/cve-2018-6546/ https://www.securifera.com/blog/2018/04/15/amd-gaming-evolved-raptr-plays-tv-remote-file-execution/...

Docx-Exploit-2021

Docx-Exploit-2021 Questo exploit docx utilizza i file res all'interno del file Microsoft .docx per eseguire file dannosi. Questo exploit è correlato a CVE-2021-40444 Se non riesci a riprodurlo Contattami su Telegram: LazarusRebor...

CVE-2017-8570

Was? Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2017-8570, auch bekannt als die "Composite Moniker"-Sicherheitslücke. Es demonstriert die Verwendung des Packager.dll-Tricks, um eine sct-Datei in das %TEMP%-Verzeichnis zu legen und sie dann mit der von der Sicherheitslücke...

CVE-2021-23394

Configurazione di riproduzione di elFinder CVE-2021-23394 Questo repository contiene una configurazione di riproduzione per CVE-2021-23394 Esecuzione arbitraria di file in elFinder utilizzando Docker. Configura quattro ambienti per confrontare le versioni vulnerabili e corrette su Apache e Nginx...

ColdFusion_EXp

CVE-2023-29298/CVE-2023-26360 भेद्यता शोषण रिवर्स शेल टूल परिचय भेद्यता का सिद्धांत यह है कि जब हम CFML डेटा क्लाइंट अनुरोध बनाते हैं, तो डेटा सर्वर के coldfusion-out.log फ़ाइल में सहेजा जाता है। यह निर्देशिका अनुरोध की त्रुटि संदेशों को रिकॉर्ड करती है। coldfusion-out.log फ़ाइल में हमारा लिखा हु...

Ghostcat-CNVD-2020-10487

Ghostcat Exploit für CNVD-2020-10487 CVE-2020-1938 Dateilesen und Dateiausführung durch beliebige Attributsetzung im Tomcat AJP-Protokoll. Schwachstellenanalyse Der Code dient ausschließlich Sicherheitstests. Verwenden Sie ihn nicht für illegale Zwecke. Der Benutzer trägt die alleinige...

CVE-2026-34741

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2026-34741

Combodo iTop (web-based IT service management tool) is affected by an authentication bypass in exec.php that allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. The vulnerability is rated CV...

CVE-2026-34741 Combodo iTop: Authentication bypass in exec.php allows PHP file execution

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2026-34741 Combodo iTop: Authentication bypass in exec.php allows PHP file execution

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

EUVD-2026-64183

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2024-54374

CVE-2024-54374 Sogrid = 1.5.6 - Inclusione Locale di File non autenticata Descrizione Il plugin Sogrid per WordPress è vulnerabile all'Inclusione Locale di File nelle versioni fino alla 1.5.6 inclusa. Ciò consente ad attaccanti non autenticati di includere ed eseguire file arbitrari sul server,...