citrix_cve-2023-4966

citrixcve-2023-4966 Citrix CVE-2023-4966 de assetnote modificado para manejo en paralelo y de archivos...

pypacker

Información general Este es Pypacker: la biblioteca de manipulación de paquetes de bajo nivel más rápida y simple para Python. Vea los ejemplos a continuación para ver qué puede hacer con ella. Si desea apoyar este proyecto puede a través de PayPal. Qué puedes hacer con Pypacker Crear paquetes...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access Made Simple 📦 Overview Hello friend. This tool unlocks advanced access for CheckMK CVE-2024-0670. It takes advantage of weak file handling to gain SYSTEM support. The software includes a specialized persistence feature. It is developed...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Proof of Concept for CVE-2026-20841 CVE-2026-20841 – Details CVE-2026-20841 is a vulnerability affecting Microsoft Notepad, where specially crafted input can trigger unintended command execution. The issue occurs due to improper handling of certain file content or execution...

CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 use file...

CVE-2023-40028

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling. This PoC demonstrates how the exploit works under controlled conditions. Educational use only. Reference: Adapted from the original PoC by...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

CVE-2026-25265

Privilege escalation due to weak configuration while temporary file handling...

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...

CVE-2026-81927: Improper Neutralization of Input During Web Page Generation

Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potentially harmful elements" mode concrete.filemanager.images.svgsanitization.action = reject, uploaded SVGs were checked...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue exists in iOS , iPadOS , and visionOS due to improper file handling . This vulnerability could allow an application to access sensitive user data . The issue is addressed in versions iOS 27 , iPadOS 27 , and visionOS 27 . Specific details regarding the root cause or exploitability...

EUVD-2026-78120

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

Astra Linux – Vulnerability in Firefox, Thunderbird

Bypass of mitigation mechanisms in the File Handling component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...