HeimShell

HeimShell CVE-2023-51803 HeimShell is an exploit for CVE-2023-51803, leveraging an arbitrary file-upload vulnerability in LinuxServer.io Heimdall ≤ 2.5.6. It will auto-detect the target version and either warn of exploitability or remote fetch a php shell defined by SHELLURL ≤ 2.2.2 : Aribtrary...

blenny

Blenny is a proof-of-concept payload obfuscation tool for Windows which hides executable payload data within the icon of the executable. It is named after the sabre-toothed blenny fish, which mimmicks the behavior and looks of cleaner fish to prey on unsuspecting fish. Why? I can't recall exactly...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

CVE-2023-3450

CVE-2023-3450 fofa：iconhash="-399311436" 案例：http://123.54.231.201:6060 Usage: python3 CVE-2023-3450.py -h, --help python3 CVE-2023-3450.py -u URL, --url URL python3 CVE-2023-3450.py -f FILE, --file FILE...

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

SiYuan Note - Cross-Site Scripting

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

IconJector

IconJector This is a Windows Explorer DLL injection technique that uses the change icon dialog on Windows. It can trick users into loading a malicious DLL into their explorer process: https://github.com/0xda568/IconJector/assets/61665703/06428402-764c-4279-b762-1d01082552c8 Additionally, it can b...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure By Ruben Enkaoua and Cymulate First Blog: Zero Click, One NTLM: Microsoft Security Patch Bypass CVE-2025-50154 Second Blog: Patched Twice, Still Bypassed: New NTLM Leak CVE-2025-50154 Patch Bypass Descripti...

usbhijacking

CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000...

CVE-2026-122095

AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting XSS vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu...

EUVD-2026-123776

AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting XSS vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu...

CVE-2026-122095

AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting XSS vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu...

CVE-2026-122095

The AsiaInfo BSS Platform versions 9.2.0 to 9.2.37 are vulnerable to a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary privileges can upload an SVG file containing embedded JavaScript. While normal menu rendering using an HTML ...

CVE-2026-124690 Cross-Site Scripting During Kendo UI for jQuery Custom SVG Icon Sanitization

In Progress Kendo UI for jQuery, sanitizeSvgContent parses custom icon markup into a live DOM before filtering it. An attacker who can influence custom icon content can cause JavaScript to execute during icon creation, before an unsafe element is removed. The issue was reported in version...

EUVD-2026-123600

In Progress Kendo UI for jQuery, sanitizeSvgContent parses custom icon markup into a live DOM before filtering it. An attacker who can influence custom icon content can cause JavaScript to execute during icon creation, before an unsafe element is removed. The issue was reported in version...

CVE-2026-124690

The Kendo UI for jQuery component is vulnerable to Cross-Site Scripting (XSS) due to how the sanitizeSvgContent() function handles custom icon markup. The root cause is that the function parses the markup into a live DOM before performing filtering, allowing an attacker who can influence the cont...