auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

auto_re

AutoRE 特性 1. 自动重命名只有一个API调用或跳转到导入的API的虚拟函数 之前 之后 2. 根据内部调用的API指示符为函数分配TAGS 将标签设置为可重复的函数注释，并在单独的视图中显示标签树 TAGS视图的一些截图： TAG在未探索代码中的显示： 您可以使用右键菜单或按 n 快捷键轻松重命名函数： 安装 只需将 autore.py 复制到 IDA\plugins 目录，然后通过 Edit - Plugins - Auto RE 菜单即可使用。...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – Kit de ejecución SQL como root en cPanel ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, equipos azules y testers de penetración. El acceso no autorizado a sistemas informático...

Frontend File Manager < 21.3 - Unauthenticated File Renaming

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server id:...

CVE-2025-34085-Multi-target

CVE-2025-34085 多目标 RCE 扫描器 CVE-2025-34085 的大规模利用扫描器 —— 针对 WordPress Simple File List 插件的未认证远程代码执行漏洞。 该工具上传一个伪装成图片的 PHP 载荷，通过易受攻击的文件引擎重命名，并用自定义命令触发 shell 执行。支持多线程扫描大规模目标集。 🔥 功能特性 多目标扫描（从 targets.txt 读取） 自动上传并重命名恶意载荷 可自定义命令的 WebShell 触发 线程化执行以提高速度 成功 RCE 记录到 vuln.txt ⚙️ 使用方法 python3 CVE-2025-34085.p...

delete-self-poc

🗑️ delete-self-poc El delete-self-poc es una demostración de un método para eliminar un ejecutable bloqueado o un archivo actualmente en ejecución del disco. Este concepto fue descubierto inicialmente por Jonas Lykkegaard, y yo he creado la prueba de concepto POC para el mismo. Además, puede...

CVE-2026-105268

The Gitea API routes for issue attachments /api/v1/repos/owner/repo/issues/index/assets/attachmentid also accepted attachments that belong to comments on the issue. Because the author of an issue may edit and delete the issue's attachments, a user who opened an issue could rename or delete...

CVE-2026-105268

The Gitea application contains an authorization flaw in its issue attachment API routes (/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}). The vulnerability allows a user who opened an issue to rename or delete attachments that were actually posted in comments by other users. T...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Resumen ejecutivo macOS Music y TV realizan un cambio de nombre inseguro que resulta en FDA al obtener control total sobre el TCC.db del usuario Reporté este error en tickets separados para cada aplicación, no dudes en fusionarlos si corresponde. El problema subyacente es que estas aplicaciones...

CVE-2026-94278

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

EUVD-2026-92968

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-94278

The File Media Renamer WordPress plugin (versions

WordPress File Media Renamer plugin <= 1.3 - Author+ Arbitrary File Rename vulnerability

Author+ Arbitrary File Rename vulnerability discovered by Sebastian Riveros in WordPress Plugin File Media Renamer versions = 1.3...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List 未认证远程代码执行漏洞利用 针对 CVE-2025-34085 的自动化利用与扫描器，该漏洞存在于 WordPress Simple File List 插件中，通过任意文件上传和重命名功能实现未认证远程代码执行 。 📄 CVE 概要 CVE ID: CVE-2025-34085 受影响组件: WordPress 插件 — Simple File List 漏洞类型: 未认证文件上传和文件重命名为可执行文件 影响: 远程代码执行 RCE 漏洞利用作者: 0xgh057r3c0n 攻击途径: 远程，未认...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2025-56399

CVE-2025-56399 – laravel-file-manager v3.3.1 中的认证远程代码执行漏洞 🧭 概述 在 laravel-file-manager v3.3.1 及更早版本中存在一个认证远程代码执行（RCE）漏洞，允许具有文件管理器界面访问权限的攻击者在服务器上执行任意代码。通过上传一个包含恶意 PHP 代码的允许的非 PHP 扩展名（例如 .png、.pdf）文件，并将其重命名为 .php 扩展名，或者直接创建并编辑一个 .php 文件，当通过公共 URL 访问该文件时，攻击者即可实现 RCE。 🧱 受影响组件 项目： laravel-file-manager...

POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4 Crítico | CWE-89: Inyección SQL | NVD Un usuario autenticado de cPanel → SQL arbitrario como root de MySQL mediante el renombrado de bases de datos. cPanel conserva incorrectamente el sqlmode de la sesión del usuario ANSIQUOTES al ejecutar operaciones de renombrado co...

CVE-2026-37071

CVE-2026-37071 Veno File Manager Project 4.4.9 中 Actions::renameFile 函数存在任意文件重命名漏洞，可导致权限提升。经认证且拥有 'reanme' 权限的攻击者可通过向受影响端点发送特制 POST 请求，重命名应用程序配置文件，触发配置重建并将超级管理员凭据重置为默认值，从而接管超级管理员账户。 https://github.com/user-attachments/assets/c729b835-3285-4853-8fe2-a485bc88ab79...