605558 matches found
PT-2026-91853
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...
Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability
Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...
Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability
Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...
PT-2026-91864
A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...
CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90611
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
Cloak
Cloak is a pluggable transport that enhances traditional proxy tools like OpenVPN to evade sophisticated censorship and data discrimination. Cloak is not a standalone proxy program. Rather, it works by masquerading proxied traffic as normal web browsing activities. In contrast to traditional tool...
dezlock-dump
dezlock-dump Extrae todo de un juego Source 2 en ejecuciĆ³n Deadlock, CS2, Dota 2 y genera un SDK de C++ a prueba de parches que resuelve offsets en tiempo de ejecuciĆ³n. Sin valores codificados, sin actualizaciones manuales cuando el juego se parchea. Inicio rĆ”pido 1. Descarga desde Releases o...
Linpmem
Linpmem -- a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an API for reading from any physical address, including reserved memory and memory...
Sn1per
Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per ā The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace ā whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...
CWFF
CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage root@kitploit: CWFF -h...
poc-CVE-2025-38352
Detalles del Exploit Este repositorio solo contiene la prueba de concepto que desencadena la vulnerabilidad. Desde entonces, he escrito un exploit completo para esta vulnerabilidad. Puedes encontrar los detalles en el enlace de abajo. https://github.com/farazsth98/chronomaly Publicaciones de...
NoLongerEvil-Thermostat
ConfiguraciĆ³n del Firmware del Termostato Nest š Ganador de la Recompensa FULU š Hack House y este proyecto son los ganadores oficiales de la Recompensa FULU para el Termostato Inteligente Nest Gen 1/2 Alternativa de Hardware: Si te interesa el lado del hardware, consulta https://sett.homes para...
CVE-2020-15148-bypasses
CVE-2020-15148-bypasses Algunas bypasses de CVE-2020-15148 deserializaciĆ³n de Yii2 poc1 Esta es explotable en la versiĆ³n 2.0.37; la 2.0.38 lo corrigiĆ³, y es a esta a la que se asignĆ³ CVE-2020-15148. Las tres siguientes son bypasses. root@kitploit: checkAccess = 'system'; $this-id = 'ls'; namespac...
NoArgs
NoArgs: Manipulating and Hiding Process Arguments Twitter: @AzizWho Disclaimer: Educational Use Only This tool is intended solely for educational purposes. I am not liable for any misuse and all users must adhere to applicable laws. Illegal use is prohibited. Introduction NoArgs is a tool designe...
multitor
multitor Create multiple TOR instances with load-balancing. Description ā¢ Introduction ā¢ How To Use ā¢ Parameters ā¢ Requirements ā¢ Docker ā¢ Other ā¢ License ā¢ Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...
Crescendo
Table of Contents 1. Getting Started 2. Requirements 3. Components 4. Testing and Development 5. Signing 6. Building 7. Issues/Bugs/Features 8. Troubleshooting 9. TODO Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1. Ensure that...
cve-2020-1350
This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS. NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can...
SeekYou
Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. SeekYou Unified host intelligence across 15 sources ā Query any IP, domain, or ASN f...
XCTR-Hacking-Tools
š XCTR Hacking Tools š Version 1.0.0 All in one tools for Information Gathering. Instagram: Capture the Root š¼ļø Screenshots š¼ļø š¹ How to use š¹ Click on the image... Thank you Jolanda de Koff. You can visit https://hackingpassion.com for a lot of amazing articles. š Read Me š Initially, you need to...