DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting en Slack 4.33.73 - CVE-2023-38820 Descubridor: Idan Malihi Descripción Un problema en Slack v.4.33.73 permite a un atacante local ejecutar código arbitrario mediante el mecanismo de carga de DLL en los archivos profapi.dll, CRYPTBASE.dll,...

CVE-2020-9442

Título del Exploit: OpenVPN Connect para Windows MSI - 3.1.0.361 - Escalada de Privilegios Fecha: 2020-02-28 Autor: Andrew Hess Enlace del software: https://openvpn.net/client-connect-vpn-for-windows/ Versión: 3.1.0.361 MSI CVE: CVE-2020-9442 Historial 2019.12.15 - Vulnerabilidad descubierta...

Notepad-8.8.1_CVE-2025-49144

CVE-2025-49144 – Exploit para Notepad++ 8.8.1 Este repositorio contiene un Prueba de Concepto PoC funcional que explota la vulnerabilidad CVE-2025-49144 en el instalador de Notepad++ 8.8.1. La ejecución maliciosa ocurre al colocar un binario regsvr32.exe en el mismo directorio que el instalador...

CVE-2024-55347

CVE Disclosure: CVE-2024-55347 Public Disclosure of CVE-2024-55347 🚀 Date: 10-02-2025 Summary A Binary Planting vulnerability in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 allows attackers to escalate privileges and execute arbitrary code by placing a maliciously crafted Binary file in a...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...

CVE-2024-4883

CVE-2024-4883 PoC for CVE-2024-4883 Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution CVE-2024-4883 Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/ Usa...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 Plantación de DLL en Corsair iCUE v.5.3.102 CVE-2023-38822 Descubridor: Idan Malihi Descripción Un problema en Corsair iCUE v.5.3.102 permite a un atacante local ejecutar código arbitrario a través de los componentes MPDC.dll, CRYPTSP.dll, dcomp.dll,...

CVE-2023-38831

CVE-2023-38831 exploit de winrar 6.22 = PoC rápida root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc ejemplo de uso root@kitploit: python3 simplefile.txt script.bat output.zip...

notepad-v8.8.1-LPE-CVE-

notepad-v8.8.1-LPE-CVE- CVE-2025-49144 Notepad++ v8.8.1 POC a nivel de SYSTEM 📌 CVE-2025-49144 es una vulnerabilidad de escalada de privilegios local de alta gravedad encontrada en los instaladores de Notepad++ v8.8.1 y versiones anteriores. Esta vulnerabilidad se origina por un comportamiento de...

CVE-2025-49144

PoC de Plantación Binaria de Notepad++ CVE-2025-49144 ⚠️ SOLO CON FINES EDUCATIVOS Este código está diseñado para fines educativos y de investigación para comprender las vulnerabilidades de plantación binaria. Úselo solo en entornos controlados con la autorización adecuada. 📋 Resumen Esta Prueba d...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

CVE-2024-36587

CVE-2024-36587 - Escalada de Privilegios Local en dnscrypt-proxy Resumen Descripción de la vulnerabilidad : Debido a que el servicio dnscrypt-proxy confía en el ejecutable del directorio actual al registrarse, es posible insertar un binario malicioso para escalar privilegios. Versiones afectadas ...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability video demo: https://youtu.be/AMODp3iTnqY The 'DCP://' URI scheme is an internal protocol used by Real Player to retrieve URLs to display in the Player browser tab. It stands for 'Data Cache Protocol'. It will retrieve files fr...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

CVE-2020-1337

CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...

CVE-2026-95660

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...

EUVD-2026-84628

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...

CVE-2026-95660 Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...