SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

efiSeek

efiSeek for Ghidra About The analyzer automates the process of researching EFI files, helps to discover and analyze well-known protocols, smi handlers, etc. Features Finds known EFI GUID's Identifies protocols located with LOCATEPROTOCOL function Identifies functions used as the NOTIFY function...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

citrix-cve-2021-22941-lab

⚠️ Disclaimer This is a mock simulation of the CVE-2021-22941 vulnerability for testing purposes. The mock server replicates the actual vulnerable behavior where the Upload.aspx endpoint is accessible without authentication and returns LocalFile GUID responses, as documented in the official CVE an...

metagoofil

Metagoofil 2.2 Coded by Christian Martorella www.edge-security.com [email protected] What is this? Metagoofil is a tool for extracting metadata of public documents pdf,doc,xls,ppt,etc availables in the target websites.This information could be useful because you can get valid usernames, peop...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2023-50257

ROS2 CVE-2023-50257 Reproduction 🔍 Overview This repository is based on a PoC for CVE-2023-50257 and automates the collection of RTPS packets, parses GUID values, and sends a successful DoS packet. CVE-2023-50257 is a known security vulnerability in ROS2 Robot Operating System 2...

CVE-2026-93767

The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server,...

CVE-2026-93767 Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter

The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server,...

EUVD-2026-102665

The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server,...

CVE-2026-93767

The Tainacan plugin for WordPress (versions up to and including 1.3.0 ) is vulnerable to a Directory Traversal vulnerability via the 'guid' parameter . This flaw allows authenticated attackers with Subscriber-level access or higher to perform an arbitrary file read , potentially exposing sensitiv...

CVE-2026-93767: Improper Limitation of a Pathname to a Restricted Directory

The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support for specifying the srptserviceguid parameter. The current behavior is that setting this parameter while loading the ibsrpt kernel module triggers a kernel crash. Bug: Kernel’s NULL pointer dereferencing, addres...

ida-efiutils

Script EFI per IDA Pro Alcuni script IDA per assistere nel reverse engineering di eseguibili EFI. Questo pacchetto contiene i seguenti file: 1. efiutils.py - Modulo IDAPython con alcune funzioni di supporto 2. efiguids.py - Una raccolta di GUID noti per i protocolli EFI 3. efiguidsami.py - Una...

ida-efitools2

Informazioni È un plugin IDA per estendere le capacità di reverse engineering UEFI. Basato su ida-efitools con una serie di correzioni e nuove funzionalità. Funziona sia con Python 2 che con Python 3. Supporta versioni obsolete di IDA Pro 7.x senza garanzie. Funzionalità Definizione dei GUID...

EUVD-2026-96319

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fixed a slab-out-of-bounds issue in efivarfsdcompare. This issue was observed in kernel version 6.6 present on master as well. Bugs: - KASAN: Slab-out-of-bounds in memcmp+0x98/0xd0 - Call trace: kasancheckrange+0xe8/0x1...