CVE-2019-11287

CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...

macos_app_structure

Introduzione a macOS - Struttura delle app macOS Passare a macOS da Linux o Windows può sembrare come camminare in una terra nuova e sconosciuta. Dato che Linux è open-source e Windows è ben documentato e molto popolare e macOS non è né l'uno né l'altro, per l'esattezza, macOS può essere...

CVE-2021-35492

Información del Exploit Título del Exploit: Wowza Streaming Engine 4.8.11+5 - Denegación de Servicio CVE: CVE-2021-35492 Fecha: 2021-10-06 Autor del Exploit: N4nj0 Enlace del Software: https://www.wowza.com/products/streaming-engine Versión: 4.8.11+5 Probado en: Wowza Streaming Engine = 4.8.11+5...

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole Authentication Bypass An authentication bypass PoC from unauthenticated network access to full administrator privileges. Single file, pure Python 3 standard library, zero dependencies. Vulnerability Summary The Management Server Java login service...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Prueba de Concepto PoC Simplemente accede a la URL con tu código PHP en el parámetro "gridValoresPopHidden"...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF a Escalada de Privilegios Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Software Afectado Puntuación CVSS Escenario de Ataque Prueba de Concepto PoC Pasos para Reproducir Impacto Remediación Referencias Aviso Legal Descripción...

CVE-2023-46451

CVE-2023-46451 Descripción sugerida Sourcecodester Best courier management system v1.0 es vulnerable a Cross Site Scripting XSS en el campo de cambio de nombre de usuario. Información adicional Aquí actualizo el video POC en YouTube: https://youtu.be/f8B3m5YfqI Tipo de Vulnerabilidad Cross Site...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Exploitmejorado Esta es una versión mejorada del POC del exploit creado originalmente por watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 ¡un enorme agradecimiento a ellos!! Este exploit está destinado a fines de...

BOF-pack-1

BOF-pack-1 A care package of useful bofs for red team engagments GetAppLockerPolicy Prints the Effective AppLockerPolicy for the domain TokenElevate Creates a process with winlogon's tokenIncludes Tcb Privilege enabled by default and other winlogon specific privileges. Alternative way to elevate ...

CertificateDsc

CertificateDsc Codice di comportamento Questo progetto ha adottato questo codice di comportamento. Versioni Per ogni merge nel ramo main verrà distribuita una versione preview su PowerShell Gallery. Periodicamente verrà pushato un tag di versione di rilascio che distribuirà una versione completa ...

CVE-2026-93616-check

Check Point Security Management Unauthenticated RCE — Vulnerability Detection Script An unauthenticated patch-state check for CVE-2026-93616, the unauthenticated directory traversal in the Check Point Security Management CPM server that reaches Runtime.exec, fixed in sk1000171 on 2026-09-22...

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 is vulnerable to Cross-Site Request Forgery. Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC The application does not have any CSRF protection, hence a specially crafted HTTP request can be used to, Add New User Delete Existin...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Sfruttare la System Management Mode con un interrupt molto molto molto molto molto molto molto lungo. Panoramica Si scopre che puoi rompere la SMM — l'ambiente di esecuzione sicuro e ultra privilegiato che gira invisibilmente in background su ogni CPU x86 — con niente più di...

Aether-C2-Framework

🌌 Aether-C2-Framework - Powerful Tools for Cybersecurity Training Download Aether-C2-Framework 🚀 Getting Started Welcome to the Aether-C2-Framework! This guide will help you download and run the framework easily, even if you're not a tech expert. 🛠️ System Requirements Before downloading the...

1Panel SQL Injection - Authenticated

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...

Schools Alert Management Script - Arbitrary File Read

Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...