CVE-2017-5689-Checker

CVE-2017-5689-Checker Este es un checker-exploit automático para la vulnerabilidad CVE-2017-5689. La vulnerabilidad está relacionada con la omisión de autenticación en el panel de Intel AMT. Artículo: https://habr.com/ru/post/328232 Nuestro Telegram = t.me/anarchysquad Dork de Shodan:...

react2shell-CVE-2025-55182

Attack component contains the attack code. Just uncomment it and press the button to pefrom attach. To run your own code on server exploit simply change the value of prefix key in the payload. See the AttackString file for examples El componente de ataque contiene el código de ataque. Solo...

CVE-2024-10449-patch

Patch for CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Steps: Download the patched loginAction.php file from this repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php and replace the vulnerable version with this one. Edit the...

cve-2024-38819

CVE-2024-38819 01. Descripción general de File-Traversal y WebFlux 1 Descripción general de File-Traversal y WebFlux La vulnerabilidad de File-Traversal también conocida como Path Traversal es un tipo de ataque designado como CWE-22 que permite a un atacante eludir los permisos del sistema de...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 Este script detecta si es que uno de los archivos .rar puede tener la configuración para explotar el CVE-2018-20250. Para esta detección se usa el comando file y el comando strings , que están en la mayoría de las distribuciones de linux. Uso del script...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2026-94036

D-Link DIR-X1860 and DIR-X1860Z routers (up to version 1.0.2.220120.165402) are affected by an improper access control flaw in the /ubus file of the routerd component. Manipulation of the passwd_set argument allows an attacker on the local network to bypass access controls, with no authentication...

EUVD-2026-83752

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

linux-4.1.15_CVE-2017-1000371

Linux内核发行版 4.x http://kernel.org/ 这些是Linux 4.x版本的发行说明。请仔细阅读，因为它们告诉您这是什么，解释如何安装内核，以及如果出现问题该怎么办。 什么是Linux？ Linux是Unix操作系统的克隆，由Linus Torvalds从零开始编写，并得到了来自网络上一群松散组织的黑客的帮助。它旨在符合POSIX和单一UNIX规范。 它具有您期望在现代完整功能的Unix中拥有的所有特性，包括真正的多任务处理、虚拟内存、共享库、按需加载、写时复制可执行文件、正确的内存管理以及包括IPv4和IPv6的多栈网络。...

sec_review_cve-2024-3094

A full security review of the open-source vulnerability CVE-2024-3094 was conducted. Based on the obtained data, the following were prepared: 1. Report «ThreatModel + SecurityReview» – detailed description of threats, exploitation paths, risk assessment, and recommendations for reducing the attac...

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

HashSiphon

HashSiphon NTLM hash extraction through HTTP-layer authentication proxying, zero SSPI calls from the attacker process. HashSiphon extracts the current user's NetNTLMv2 hash by manipulating HTTP authentication flows instead of calling SSPI APIs directly. It ships two variants: v1 routes NTLM auth...

PDF_XSS

Payloads All The PDFs A list of crafted malicious PDF files...

cyberbro v0.15.0

Cyberbro A simple application that extracts your IoCs from garbage input and checks their reputation using multiple services. 🌐demo.cyberbro.net About Inspired by Cybergordon and IntelOwl. This project aims to provide a simple and efficient way to check the reputation of your observables using...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

BruteRatel-DetectionTools

BruteRatel-DetectionTools Una colección de herramientas y reglas para decodificar badgers de Brute Ratel C4 Todas las herramientas y reglas se basan en muestras identificadas por PaloAlto en su informe https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Regla Yara La regla Yara ha sido proba...

HiveV5_keystream_decryptor

PoC de descifrado de flujo de claves keystream de HiveV5 Introducción La muestra de Hive analizada y referenciada en este documento fue elegida aleatoriamente de esta lista creada por @rivitna, a quien agradezco enormemente. Los artefactos están disponibles en la plataforma VirusTotal. En este...

Cheatsheet-God

diff UPDATE: Added my huge link of bookmarks / references ❤️ root@kitploit: ¿Tienes un millón de marcadores guardados? ¿Todos esos marcadores contienen información única? ¿Repos de GitHub marcados con estrella para más tarde? Bueno, esto es una recopilación de todos estos recursos en un único...

ida_bochs_windows

idabochswindows Script auxiliar para depuración del kernel de Windows con IDA Pro en el depurador nativo de Bochs incluidos símbolos PDB python3 + idapython 7.4 Depurador de Bochs: GUI del depurador de Bochs: Uso ADVERTENCIA : ANTES DE ABRIR IDA debes establecer la variable de entorno: NTSYMBOLPA...