CVE-2020-6514

CVE-2020-6514 El exploit Al escribir el exploit, originalmente alteré los paquetes SCTP enviados al dispositivo objetivo modificando el código fuente de WebRTC y recompilándolo. Esto no era práctico para atacar aplicaciones de código cerrado, así que eventualmente cambié a usar Frida para hookear...

CVE-2026-50522

CVE-2026-50522 Poc : SharePoint Deserialization RCE SharePoint Server Unauthenticated Remote Code Execution via SecurityContextToken Cookie Deserialization Mass-scan exploit for CVE-2026-50522 targeting on-premises Microsoft SharePoint Server. Abuses insecure BinaryFormatter deserialization in th...

android_autorooter

Android Autorooter Esto es solo una nota mental, más que nada para explorar más a fondo las posibilidades del trabajo realizado aquí: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

CVE-2024-53677-S2-067-thread

Descargo de responsabilidad No utilice las técnicas relacionadas en este artículo para realizar pruebas ilegales. Cualquier consecuencia o pérdida, directa o indirecta, causada por la difusión o el uso de la información o herramientas proporcionadas en este documento será responsabilidad del...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81447

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

CVE-2026-81446

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2026-93013

RAGFlow through 0.27.2 contains a path traversal vulnerability in the dev_insert_chunks_from_file and dev_insert_metadata_from_file endpoints. The root cause is missing path validation on the file_path parameter, which allows authenticated attackers to supply absolute file paths and read arbitrar...

CVE-2026-93013 RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversal

RAGFlow through 0.27.2 contains a path traversal vulnerability in the devinsertchunksfromfile and devinsertmetadatafromfile endpoints that allows authenticated attackers to read arbitrary files by supplying absolute file paths in the filepath parameter. Attackers with valid access tokens can...

CVE-2026-80356

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

EUVD-2026-81682

RAGFlow through 0.27.2 contains a path traversal vulnerability in the devinsertchunksfromfile and devinsertmetadatafromfile endpoints that allows authenticated attackers to read arbitrary files by supplying absolute file paths in the filepath parameter. Attackers with valid access tokens can...

CVE-2026-54471

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2020-1066-EXP

Referencia Esta vulnerabilidad es una vulnerabilidad de elevación de privilegios local por reemplazo de archivos arbitrarios causada por el manejo incorrecto de objetos de enlace simbólico por parte del servicio Windows CardSpace Declaración El autor proporciona el PoC únicamente con fines de...

AdbNet

adb - Una herramienta de explotación para dispositivos Android. Una herramienta que te permite buscar dispositivos Android vulnerables en todo el mundo y explotarlos. Características root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. -...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...