6564 matches found
PlEXcalaison
Local Privilege PlEXcalasion - CVE-2021-42835 Plex Media Server for Windows prior to version 1.25.0.5282, vulnerable to Time Of Check Time Of Use TOCTOU that allows low privilege users to gain SYSTEM privileges. Discovered by Tomer Peled, Netanel Cohen, and Amir Shen a Security Researchers from...
SideCopy-Exploits-CVE-2023-38831
SideCopy Exploits CVE-2023-38831 CVE-2023-38831 is a Remote Code Execution RCE vulnerability in WinRAR that impacts WinRAR versions prior to 6.23. Here's how an attacker can exploit it: the malicious archive file contains both a benign file and a folder with the same name as the file. Typically,...
CVE-2024-29404_Razer
CVE-2024-29404 Razer Synapse 3 =Synapse Version 3.9.131.20813 App Version =20240213 "Chroma Effects" functionality Elevation of Privilege Vulnerability via Arbitrary File/Folder Removal https://github.com/user-attachments/assets/6528f166-5514-4b10-b1a4-3644ec11e772...
cve-2018-11714_POC
cve-2018-11714POC An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. artigo pt-br:...
CVE-2025-48799
Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...
CVE-2024-23334
CVE-2024-23334 !IMPORTANT Keep in mind that sometimes aiohttp may be configured in another folder and not in the static one, if that is the case change the value of the folder variable in the script. How To Use Exploit !CAUTION Disclaimer: This script is made for ethical uses...
Powershell-Tools
PSUnzipper - PowerShell Unzipper Uses SharpZipLiB in .NET, loaded in runtime no file on disk - ref. https://github.com/icsharpcode/SharpZipLib Can be used with password zip, unzip Both encryption methods AES and ZipCrypto is supported. When zipping/unzipping - no file in temp is created - all...
CVE-2024-23334-PoC
CVE-2024-23334-PoC This repository is a proof of concept POC for CVE-2024-23334, demonstrating an attempt to replicate the bug in aiohttp that leads to Local File Inclusion LFI. !CAUTION Disclaimer: This POC is for educational purposes only. DO NOT use it in real-world scenarios. Install 1. Clone...
CVE-2025-6218-POC
CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...
FluentD-TD-agent-Exploit-CVE-2020-28169
FluentD-TD-agent-WindowsExploit V4.0.1 CVE-2020-28169 Insecure Folder permission that leads to privilege escalation Download URL: https://td-agent-package-browser.herokuapp.com/4/windows...
CVE-2026-108745: Missing Authorization
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a shared folder. Attackers can guess table and column names and enumerate second-resolution timestamps to download victims...
CVE-2021-4034
CVE-2021-4034 Exploit of the vulnerability CVE-2021-4034 Steps prior to execution: Add a . after the = in the GNCOV... folder...
CVE-2026-108165
Versions of Immich through 3.3.1 are vulnerable to a missing authorization flaw in the partner synchronization stream. The root cause is that synchronization queries fail to exclude Locked visibility, allowing authenticated partners to access Locked Folder asset metadata. An attacker with an acti...
CVE-2022-22828
CVE-2022-22828 Synametrics - SynaMan version 4.9 Summary Viden Labs has found an Insecure Direct Object Reference IDOR vulnerability in Synametric's SynaMan. This vulnerability is present in versions 4.9 and earlier. This vulnerability has since been patched in version 5.0. “Insecure direct objec...
CVE-2026-66492
Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...
BIT-GRAFANA-2026-13719 Alert rules in restricted folders disclosed via the alert rules list API
An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...
winsos-poc
WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...
PT-2026-109162
An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...