CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking What is it? An attacker app and a victim app to practice the CVE-2021-33699Task Hijacking vulnerability. Reference https://naro-security.tistory.com/55...

CVE-2022-27502

RealVNC server up to 6.9.0 DLL Hijacking Exploit CVE-2022-27502 You can use pre-compiled version 64-bit of it from HERE Copy it to %TEMP% and initiate a repair of RealVNC Server from add or remove programs. It will write the output of whoami command in %TEMP%\output.txt If you want to change the...

KDU

KDU Kernel Driver Utility Requisitos del sistema x64 Windows 7/8/8.1/10/11; Se requieren privilegios administrativos. Propósito y características El propósito de esta herramienta es proporcionar una forma sencilla de explorar el kernel/componentes de Windows sin requerir una configuración extensa...

TeleShadow2

TeleShadow 2 Teleshadow2- Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after compiling. How do I use the session file? Delete everything...

CVE-2021-38619

CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Unauthenticated Stored XSS Vulnerability openBaraza HCM v.3.1.6 does not properly neutralize user-controllable input, this could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative...

CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

CVE-2024-33231

Ferozo Webmail XSS Vulnerability via File Upload CVE-2024-33231 Description Ferozo Webmail version 1.1 is vulnerable to Cross-Site Scripting XSS through the file upload functionality. An attacker can exploit this vulnerability by uploading a specially crafted file containing malicious JavaScript...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...

Enumprotections_BOF

Enumprotections BOF Este BOF se puede utilizar para enumerar los procesos del sistema e identificar el nivel de protección de cada uno. También se devuelve información adicional, como la relación con servicios, usuario, sesión y ruta. Esta información, en combinación, puede utilizarse para...

aapanel-ws-bypass

aaPanel: Los proveedores no siempre corrigen las cosas correctamente Una corrección incompleta para CVE-2021-37840 sigue exponiendo 3,6 millones de servidores a RCE como root, 5 años después Descubierto por: EON Security CVE: Pendiente de asignación CVSS: 8.8 Alta —...

EDR-Preloader

EDR-Preloader Un bypass de EDR que evita que los EDR enganchen hook o carguen DLLs en nuestro proceso secuestrando la capa AppVerifier Para más detalles, consulte: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...

morpheus

Morpheus - herramienta automatizada de secuestro TCP/IP con ettercap Versión lanzada: v2.2 - ESTABLE Autor: pedro ubuntu r00t-3xp10it Nombre clave: oneiroi phobetor El dios griego de los sueños mitológicos Distros compatibles: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS...

poc-cribl-rce

Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...

USBCoercer

Supported Targets| ESP32-S3 ---|--- USBCoercer: Un Dispositivo de Coerción WPAD Basado en TinyUSB USBCoercer convierte una placa de desarrollo ESP32 con USB-OTG nativo en un gadget Ethernet-over-USB capaz de coaccionar la configuración de proxy mediante WPAD. Se basa en el ejemplo TinyUSB Network...

CVE-2024-22774

Software de Imagen Dental Panorámica 9.1.2.7600. Escalada de Privilegios mediante Secuestro de DLL Fantasma CVE-2024-22774 Tabla de contenidos Tabla de contenidos Introducción Versión final del software Búsqueda de DLL secuestrables Configurando el ataque Exploit Persistencia después de la...

CVE-2021-25374_Samsung-Account-Access

CVE-2021-25374 - Samsung Account Access Script This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung Device, and if the victim's device is from the US or Korea region. How to use this script: 1. Host a we...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2022-25943

CVE-2022-24934 漏洞概述 WPS Office安装时，会以管理员权限安装服务程序wpscloudsvr，该服务程序配置为手动启动，但错误配置了该服务程序所在文件夹的访问控制列表（ACL）属性，普通Users组成员仍然对该文件夹有读写权限。 影响范围 WPS Office版本小于11.2.0.10258均存在该漏洞。 （WPS版本号看最后一组，最后一组数字大即为新版本，11.1表示个人版，11.2表示企业版，11.6和11.8表示政企定制版） 利用场景...

CVE-2025-47962-POC

CVE-2025-47962-POC Proceso de reproducción: i686-w64-mingw32-gcc -shared -o CRYPTBASE.dll poc.c -lkernel32 copy CRYPTBASE.dll "C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\CRYPTBASE.dll" net stop IpOverUsbSvc net start IpOverUsbSvc Explicación: IpOverUsbSvc sc.exe qc IpOverUsbSvc SERVICENAME:...

CVE-2026-106039

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, steal, and falsely complete replication tasks via the cororpc port. Attackers can invoke CreateCopyTask, CreateMoveTask, FetchTasks, and MarkTaskToComplete wi...