Notepad-8.9.6-PoC

Notepad++ PoCs CVE-2026-48770 / CVE-2026-48778 / CVE-2026-48800 Proof-of-concept scripts for three vulnerabilities in Notepad++ = 8.9.6, patched in v8.9.6.1 2026-05-26. Vulnerabilities CVE| Type| CVSS| Impact ---|---|---|--- CVE-2026-48770| OOB Read via WMCOPYDATA| 5.0| DoS / Crash CVE-2026-48778...

Malicious code in seapy-ops (PyPI)

In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...

CVE-2026-48778-PoC

CVE-2026-48778 — Notepad++ Arbitrary Code Execution PoC Severity: High CVSS 7.8 | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48778, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6. For full technical details, see the official security advisory. Usage...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

dontgo403

dontgo403 is a tool to bypass 40X errors. Installation Grab the latest release for your OS from RELEASES Outdated atm Or compile by your own RECOMMENDED: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Customization If you want to edit or add new bypasses, you can...

enum_shares

enumshares Shared folders enumeration tool EnumShares enumerates shared folders across the network and under a custom user account. It can check if the shared folder is writable for the current user. It can save you a lot of time when you need to discover directories allowing "write" to everyone ...

CVE-2020-1283_Windows-Denial-of-Service-Vulnerability

CVE-2020-8103 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/dos-via-arbitrary-folder-creation/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was Developed by James Forshaw. The...

CVE-2023-30943

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-30943...

CVE-2026-104110

Prior to version 3.24.0 , the FileRise Pro add-on was vulnerable to unauthenticated information disclosure via the /api/pro/portals/get.php endpoint. The root cause was a missing authentication gate (fr_pro_guard_auth()), allowing any caller who guessed a portal slug to retrieve a full internal r...

CVE-2023-38831-Winrar-Exploit-Generator-POC

CVE-2023-38831 Winrar Exploit Generator POC This is a basic proof of concept for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code. Description from...

CVE-2026-103988

Prior to version 3.23.0 , the FileRise web-based file manager is vulnerable to an authorization bypass in the /api/folder/renameFolder.php endpoint. While the system validates the source folder, it fails to independently authorize the destination parent. An authenticated, non-administrator user w...

EDR-Redir

EDR-Redir EDR-Redir uses a Bind Filter mini filter bindflt.sys to redirect the Endpoint Detection and Response EDR 's working folder to a folder of the attacker's choice. Alternatively, it can make the folder appear corrupt to prevent the EDR's process services from functioning. Command Line Synt...

EUVD-2026-101671

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...

CVE-2026-62664

The FileRise self-hosted web-based file manager is vulnerable to an authenticated path traversal flaw in the createFolder function. Prior to version 3.19.0 , the system validates the folderName string but fails to reject dot-dot path segments . This allows an authenticated low-privileged user wit...

CVE-2026-61844

The web-based file manager FileRise is vulnerable to a metadata filename collision before version 3.18.0 . The system flattens logical folder paths into filenames by replacing separators and spaces with hyphens, allowing distinct paths (e.g., team/docs and team-docs) to share the same metadata fi...

CVE-2026-61843

Versions of FileRise prior to 3.18.0 are vulnerable to an unauthenticated file overwrite. The software fails to reject destination filenames that already exist within upload-enabled shared folders or upload-only links. An unauthenticated visitor with a valid share token and password can upload a ...

CVE-2026-55498

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folder to a sibling directory under the upload root. An...

CVE-2026-55498

Versions of FileRise prior to 3.15.0 are vulnerable to a symbolic link path traversal issue. When public shared-folder links with subfolder browsing are enabled, the application fails to enforce the shared folder as a real-path boundary when resolving symlinks. Consequently, an unauthenticated at...

EUVD-2026-101626

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folder to a sibling directory under the upload root. An...

CVE-2025-21420_POC

Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...