LdrLockLiberator

LdrLockLiberator Für den Fall, dass DLLMain der einzige Weg ist LdrLockLiberator ist eine Sammlung von Techniken, um die Loader Lock zu umgehen oder anderweitig darauf zu verzichten, während du deinen Code aus DllMain oder an jeder anderen Stelle, an der die Sperre vorhanden sein kann, ausführst...

cve-2025-29384-poc

CVE-2025-29384 概念验证漏洞利用程序 概述 本仓库包含针对 CVE-2025-29384 的高级概念验证（PoC）漏洞利用程序，这是一个严重的基于栈的缓冲区溢出 漏洞，发现于运行固件版本 V15.03.05.14multi 的 Tenda AC9 路由器中。该漏洞允许未经认证的远程攻击者 使路由器的 Web 服务器崩溃（拒绝服务，DoS ），并有可能执行任意代码（远程代码执行，RCE ）。 本项目的目的是展示漏洞利用开发技能 ，为网络安全社区做出贡献，并为学术评估（例如网络安全奖学金）提供教学展示。 本仓库包含针对 CVE-2025-29384...

CVE-2022-44789

CVE-2022-44789 Files: PublicReferenceURL.txt: riferimento pubblico per CVE writeup.md: Writeup + exploit attachment: Versione vulnerabile di MuJS + exploit di esempio...

wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit per il plugin WordPress wp-jobhunt Il plugin wp-jobhunt è un plugin utilizzato con il tema JobCareer: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 vedi changelog in fondo Exploit Python per...

cisco_asa_research

Pesquisa sobre Cisco ASA Este repositório contém slides e código apresentados na Black Hat USA 2022 e na DEF CON 30. O seguinte pode ser encontrado: Slides Decks de slides da DEF CON 30 e da Black Hat. O deck da DEF CON é um pouco mais longo devido a um espaço de tempo maior. theway - uma...

CVE-2021-4034-new

CVE-2021-4034 Ein Tag für den Polkit-Privilege-Escalation-Exploit Führe einfach make, ./cve-2021-4034 aus und genieße deine Root-Shell. Die ursprüngliche Advisory der eigentlichen Autoren findest du hier...

EXPLOIT-CVE-2026-26216

CVE-2026-26216 — Crawl4AI RCE non authentifié via hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · RCE pré-auth · CWE-94 Injection de code Exécution de code à distance non authentifiée sur le serveur Docker de Crawl4AI . Ce code est exécuté avec exec dans un « sandbox maison » — un dictionnaire de builtins...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — Writeup CVE-2026-29000 Disclaimer: Questo exploit è stato sviluppato esclusivamente per la macchina ritirata di HackTheBox "Principal". Solo a scopo educativo. Non utilizzarlo contro sistemi che non possiedi o per i quali non hai esplicita autorizzazione al test. Informazioni sull...

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Risultato atteso: scansione delle porte di localhost o di host accessibili internamente. Destinato esclusivamente a scopi educativi e di test in ambienti aziendal...

CVE

CVE Uma coleção de scripts de prova de conceito escritos pela equipe do STAR Labs para várias CVEs que eles descobriram ou que foram encontradas por outros. CVE-2026-53264 Alvo: Linux Kernel Versão: CentOS 9 kernel versão 5.14.0-721 Exploit escrito por: Lee Jia Jie CVE-2025-29824 Alvo: Driver do...

phoneinfoga

Information gathering framework for phone numbers Documentation • API documentation • Related blog post About PhoneInfoga is one of the most advanced tools to scan international phone numbers. It allows you to first gather basic information such as country, area, carrier and line type, then use...

CSRF-exploit-generator

CSRF-exploit-generator Генератор CSRF -эксплойтов позволяет пользователям создавать форму CSRF-эксплойта с настраиваемыми параметрами. CSRF-exploit-generator Возможности Ввод целевого URL: указывает URL-адрес, который будет использоваться для эксплуатации. Ввод POST-параметров: позволяет добавлят...

pmp-exploit

pmp-exploit यह एक्सप्लॉइट Password Manager Pro में पाई गई Privilege Escalation विशेषाधिकार वृद्धि भेद्यता का लाभ उठाता है, जिससे एक सामान्य उपयोगकर्ता को SuperAdmin तक उन्नत किया जा सकता है और फिर एप्लिकेशन में संग्रहीत पासवर्ड और फ़ाइलें डाउनलोड की जा सकती हैं। प्रभावित सिस्टम root@kitploit:...

CVE-2026-59310

CVE-2026-59310 English | 한국어 설명 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. 취약점 상세 정보...

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense — полный фреймворк для эксплуатации 📚 Техническая документация для презентации В этом документе объясняется каждый компонент фреймворка, зачем он существует и как работает эксплуатация heap buffer overflow в современных Windows. 🎯 Что такое CVE-2024-38077? Уязвимость...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutarci a riportarli a casa.https://stories.bringthemhomenow.net/...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC Exploit de PoC para o driver EtdSupp do HP Hardware Diagnostics CVE-2023-32673/PSR-2022-0209 Compilação Abra no Visual Studio 2019 Compile em release Admire ou não Resumo Driver bem simples com leitura/escrita de memória virtual, sem MmMapIoSpace, etc. Aviso Refrigerante...

CVE-2021-3560

Analisi di elevazione dei privilegi locali tramite condition race CVE-2021-3560 PolKit toc Riepilogo della vulnerabilità ID vulnerabilità: CVE-2021-3560 Punteggio vulnerabilità: Prodotto vulnerabile: linux PolKit polkitd Versione interessata: introdotta nel codice sorgente 0.113;...

CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP Server RCE Nicht authentifizierte Remote-Codeausführung über das run-code MCP-Tool Proof-of-Concept-Exploit für CVE-2026-5029 — eine kritische, nicht authentifizierte Remote-Codeausführungs-Schwachstelle im Code Runner MCP Server, ausgelöst über das MCP-Tool, wen...

henkaku

Compilation Seul Linux est pris en charge. Vous aurez besoin de : Python 3 Vita SDK Uglify JS paquet Ubuntu 16.04 node-uglify version testée 2.4.15 Autres outils standard que vous devriez déjà avoir installés, comme openssl, dd, cat, touch Tous les outils doivent être dans votre PATH. Exécutez...