move-vulnerability-database

Welcome to the Move Vulnerability Database MVD v3.0! A comprehensive collection of vulnerability patterns in the Move ecosystem. What's Inside Vulnerability Patterns - Categorized security issues with examples and severity ratings Appendix - Audit reports and protocol references Learning...

MoveEdr

MoveEDR If you're admin you can force Windows to delete or move folders and files around immediately after booting before services are started. This can be used to disable EDRs. Usage !CAUTION There is an issue with CrowdStrike which results in a bootloop with the message "INACCESSIBLEBOOTDEVICE"...

CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

WdToggle

This repository has been moved to our C2-Tool-Collection repository...

parallels-file-move-privesc

parallels-file-move-privesc This repository contains an exploit for CVE-2023-50226 / ZDI-CAN-21227, which can be used to escalate privileges to root using Parallels Desktop on versions before 18.3.2...

CVE-2020-0668

CVE-2020-0668 Use CVE-2020-0668 to perform an arbitrary privileged file move operation. Use https://github.com/itm4n/UsoDllLoader Windows = 1903 OR https://github.com/xct/diaghub Windows 1903 for privilege escalation. Demo Links & Resources...

RedCloud-OS

⚠️ Projet RedCloud OS déplacé 🚚 Ce projet a été déplacé vers un nouvel emplacement : https://github.com/RedCloudOS 👉 Consultez notre site web pour plus d'informations : https://redcloud.training/ Ce dépôt est désormais archivé et ne recevra plus de mises à jour...

CVE-2016-3088

CVE-2016-3088 Apache ActiveMQ Remote Code Execution Exploit Description The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Author Alexandre Aguiar @cyberaguiar Exploit...

Benchmark

The OWASP Benchmark project GitHub repository has moved. There is now a new GitHub organization for OWASP Benchmark at: https://github.com/OWASP-Benchmark and what was https://github.com/OWASP/Benchmark is now: https://github.com/OWASP-Benchmark/BenchmarkJava Over time, additional subprojects are...

RazerEoP

RazerEoP PoC for arbitrary file delete/move in Razer Synapse 3 Macro module. This module allows user to export created macros to file on disk and file operation is done via razer service that runs as nt authority\system. I tried to report this to razer using their BB program and i got response th...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Handling PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑27654 , a heap‑overflow vulnerability in the ngxhttpdavmodule of nginx. The bug arises from a size‑t underflow when handling MOVE/COPY requests with specially craft...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777883924)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777883924 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams...

Linux Distros Unpatched Vulnerability : CVE-2026-81842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library...

CVE-2026-81842

An authenticated user with edit permission on one folder can exploit an incorrect authorization flaw to move a library panel into another folder where they only possess view permission . This occurs because the update path fails to verify library panel create permissions on the destination folder...

EUVD-2026-89460

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...

CVE-2026-81842 Library panel can be moved into a folder without library panel create permission

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

CVE-2026-71897

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

EUVD-2026-88819

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...