Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Memory Disclosure Vulnerability in Citrix NetScaler / ADC 📌 1. Executive Summary CitrixBleed 2 refers to a critical memory disclosure vulnerability affecting: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 Internet-facing VPN appliances It allows unauthenticated...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto استغلال كتابة ملف هذا الاستغلال يبحث في عناوين Global Protect URLS ويحاول كتابة ملف باستخدام CVE-2024-3400 استخدم بحذر أُعد لأغراض تعليمية فقط الاستخدام: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt بحث Shodan وتصفية العناوين: shodan search...

CVE-2014-4688

CVE-2014-4688 python3 pfsense.py --rhost 10.10.10.60 --lhost 10.10.14.2 --lport 9999 --username rohit --password pfsense...

how-to-bypass-aslr-on-linux-x86_64

كسر ASLR بتقنية 64 بت على Linux x86-64 في هذا المقال، سأناقش تطبيق التقنية التي وصفها Samuel Groß في Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass، لتجاوز ASLR على Linux x8664. لإظهار ذلك، سأحل تحديًا من نوع pwnable من Buckeye CTF، اسمه guessgod. سأحا...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit سكربت bash يتيح تحديد و/أو استغلال ثغرة Log4shell عن بُعد. تقوم هذه الأداة بإجراء اختبارات مختلفة باستخدام حمولات LDAP ورؤوس X-Api-Version وUser-Agent وX-Forwarded-For. استخدم هذا السكربت دائمًا بعد الحصول على إذن مسبق من مالك الخدمة/التطبيق الذي يتم تدقيقه. التبعيات: 1...

CVE-2025-3248-POC

CVE-2025-3248-POC CVE-2025-3248 का POC लक्ष्य मशीन पर कोई भी कमांड निष्पादित करें उपयोग: python poc.py 'http://xxx.com' 'ls /' पीड़ितों के कंप्यूटर पर कुछ प्यार छोड़ें poc.py...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 الوصف الثغرة موجودة في منتج Oracle WebLogic Server من Oracle Fusion Middleware المكوّن: Core. الإصدارات المتأثرة المدعومة هي 12.2.1.4.0 و14.1.1.0.0. هذه الثغرة سهلة الاستغلال وتسمح لمهاجم غير مصادق مع إمكانية الوصول إلى الشبكة عبر T3 أو IIOP باختراق Oracle WebLogic...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

cve-2019-1108

استغلال CVE-2019-1108 CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory...

CVE-2024-9570_D-Link-DIR-619L-bof

CVE-2024-9570D-Link-DIR-619L-bof CVE-2024-9570 के लिए शोषण D-Link DIR-619L B1 2.06 में एक भेद्यता पाई गई और इसे गंभीर के रूप में वर्गीकृत किया गया। इस समस्या से प्रभावित फ़ाइल /goform/formEasySetTimezone का फ़ंक्शन formEasySetTimezone है। तर्क curTime के हेरफेर से बफर ओवरफ्लो होता है। हमला दूरस्थ...

iboss Secure Web Gateway - Stored Cross-Site Scripting

A cross-site scripting vulnerability has been found in iboss Secure Web Gateway up to version 10.1. The vulnerability affects the /login file of the Login Portal component, where manipulation of the redirectUrl parameter leads to cross-site scripting. The attack can be launched remotely and the...

Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...