CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 is an authentication bypass that bypasses the patch for VMSA-2023-0001. VMSA-2023-0001 for vRealize Log Insight includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 Path: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 Difficulty: Premium room Focus: Outlook Protected View bypass, NTLM hash leaking, and credential capture with Responder CVE-2024-21413 is a critical Microsoft Outlook vulnerability...

PackMyPayload

PackMyPayload - Amenaza emergente de malware contenerizado Ir a formatos compatibles Esta herramienta toma un archivo o directorio como entrada y los incrusta en un archivo de salida que actúa como un archivo/contenedor. Puede servir como Prueba de Concepto para presentar el riesgo emergente de...

CVE-2026-39875-macOS-CUPS-LPE

CVE-2026-39875-macOS-CUPS-LPE Unprivileged user to root via CUPS vulnerability affecting macOS Tahoe, Sequoia, and Sonoma prior to macOS 26.6 / 15.7.8 / 14.8.8. Proof of Concept Demonstrations macOS Tahoe 26.4.1 macOS Sequoia 15.7.5 macOS Sonoma 14.8.5 Root Cause The vulnerability arises from two...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

Embarcadero-Workaround

¿Qué es Embarcadero Workaround? Esta es una "corrección" no oficial para el "Desbordamiento de Pila/Montón de la Biblioteca VCL de Embarcadero" CVE-2014-0993 y CVE-2014-0994. ¿Qué versiones de software admite este workaround? Software de 32 bits compilado con Delphi y C++ Builder donde se incluyó...

Lfi-Space

🪐 HERRAMIENTA LFI-SPACE 🪐 Escrito por TMRSWRR Versión 1.0.0 Herramienta todo en uno para LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Capturas de pantalla 📷 👇 💫 Cómo usar 💫 👇 📒 Léeme 📒 LFI Space es una herramienta robusta y eficiente diseñada para detectar vulnerabilidades de Inclusión d...

file-unpumper

file-unpumper file-unpumper es una potente utilidad de línea de comandos diseñada para limpiar y analizar archivos ejecutables portátiles PE. Proporciona una variedad de funciones para ayudar a desarrolladores y profesionales de seguridad a trabajar con archivos PE de manera más efectiva...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

penelope

Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa más capaz a los oyentes básicos de netcat, añadiendo actualización automática de PTY, gestión de sesiones, registro, transferencias de archivos y módulos auxiliares. Tabla de contenidos 📥...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - Lectura Arbitraria de Archivos 🔥 Resumen de la Vulnerabilidad El plugin de WordPress File Away versión = 3.9.9.0.1 es vulnerable a una vulnerabilidad de lectura arbitraria de archivos sin autenticación. Esto permite a los atacantes leer cualquier...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Python2 Multithreaded Scanning for Tomcat-Ajp Protocol File Read Vulnerability A tool for scanning SRC rewards The PoC originates from https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, I am not the author of the PoC!!!! Operation 1. Place the domain/IP to be scanned in ip.txt Do not...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...

CVE-2024-10914-Exploit

Herramienta de Explotación SilverX 📌 Descripción SilverX Exploit Tool es un script de pruebas de penetración diseñado para detectar y explotar vulnerabilidades en aplicaciones web. Proporciona una interfaz tipo shell para ejecutar comandos de forma remota en sistemas vulnerables. ⚠️ Aviso Legal...

vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install $ gem install vbsmin...

CVE-2022-30206

CVE-2022-30206 This is the PoC for CVE-2022-30206. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the FileLock.exe TargetFile to redirect .SHD file to TargetFile an...

CVE-2022-1329

CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...

MoveEdr

MoveEDR If you're admin you can force Windows to delete or move folders and files around immediately after booting before services are started. This can be used to disable EDRs. Usage !CAUTION There is an issue with CrowdStrike which results in a bootloop with the message "INACCESSIBLEBOOTDEVICE"...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2025-9345

Proof of Concept Path Traversal in File Manager, Code Editor, and Backup by Managefy Vulnerability Type: Path Traversal Arbitrary File Download Affected Function: ajaxdownloadfile Impact: Authenticated users with low privilege Subscriber+ can download arbitrary files from the server, including...