CVE-2026-112031

Chamilo LMS versions up to 1.11.40/2.0.3/3.0.1 are vulnerable to Cross-Site Scripting (XSS) within the Ticket Module . The flaw resides in the TicketManager::addProject function located in main/inc/lib/TicketManager.php, where failing to properly sanitize the Name argument allows for remote execu...

CVE-2026-112031 Chamilo LMS Ticket TicketManager.php addProject cross site scripting

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack...

CVE-2026-112031 Chamilo LMS Ticket TicketManager.php addProject cross site scripting

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack...

lblfixer_cve2020_5250

LabelGrup Networks, official PrestaShop Partner Module for PS 1.7.X to fix CVE-2020-5250 vulnerability WIP Check: https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 Visit our website: https://www.labelgrup.com...

CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

PasswordsSniffer

PasswordsSniffer Description This module sniff username and password of unprotected protocols. Requirements This package require: python3 python3 Standard Library Scapy Installation pip install PasswordsSniffer Usages Command line PasswordsSniffer python3 -m PasswordsSniffer python3...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

CVE-2020-0796

CVE-2020-0796 This is an Metasploit Auxiliary to scan for CVE-2020-0796 vulnerability...

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF Educational / defensive purpose : this lab contains a deliberately vulnerable app Log4j 2.14.1 and a JNDI exploit kit, ONLY for learning how to detect and block Log4Shell in an isolated environment. Do not deploy to the Internet, do not use to attack...

DFIR-O365RC

Table of contents: 1. Module description 2. Installation and prerequisites 1. Using Docker 2. Manual Installation 3. Managing the DFIR-O365RC application 1. Creating the application 2. Updating the application 3. Removing the application 4. Permissions and license requirements 5. Functions includ...

CVE-2025-32463_Sudo_PoC

CVE-2025-32463SudoPoC PoC for CVE-2025-32463: Local privilege escalation in sudo via --chroot. Exploits NSS module injection through crafted chroot environments. Designed for security researchers and lab-only environments. CVE-2025-32463 - Local Privilege Escalation via sudo --chroot A Python-bas...

Shhhloader

Shhhloader Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. 1/25/24 EDIT: Shhhloader no...

Advanced-Loader-Reverse-Engineering

From Shellhost to 3 DLLs: Analyzing an Advanced Loader with Payload Injection, CFG Bypass, and Downgrade Attacks Overview This analysis covers a sophisticated multi-phase loader targeting Shellhost.exe, amsi.dll, mstscax.dll, and clbcatq.dll. The loader uses module stomping, CFG bypass, COM...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

FunctionStomping

FunctionStomping Description This is a brand-new technique for shellcode injection to evade AVs and EDRs. This technique is inspired by Module Stomping and has some similarities. As to this date 23-01-2022 alsohollows-hunter doesn't find it. The biggest advantage of this technique is that it isn'...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

WhacAMole

WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to malware and presenting and saving in files all the relevant information for verification, correlation or analysis, as well as dumping memory regions, processes and...

f-for-java

f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...

parallels-plist-escape

parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. It also contains code for a required kernel module, in prlmod, which can be used to send...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repository containing nse script for vulnerability CVE-2022-21907. It is a component IIS vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http.sys, which handles most basic IIS operations. After uploading the payload, the...