AhsayCBS-Auth-Bypass-RCE

AhsayCBS Authentication Bypass & RCE CVE-2026-105133 + CVE-2026-105134 — Unauthenticated remote code execution in AhsayCBS ≤10.3.4 Blog Post Technical analysis covering root cause, exploitation, and indicators of compromise is available on the Horizon3.ai attack research blog:...

CVE-2022-28219-Like

CVE-2022-28219-Like Build a test environment similar in concept to CVE-2022-28219...

CVE-2023-27532

CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...

WinRAR-Vulnerability-recurrence-tutorial

WinRAR Vulnerability Replication Tutorial WinRAR-6.22, CVE-2023-38831, CNNVD-202308-1943, DM-202307-003730, QVD-2023-19572 Vulnerability Replication Vulnerability Information WinRAR 6.23 or WinRAR =6.22 Reference Links: https://cn-sec.com/archives/1980228.html...

WebSecurityProject

WebSecurityProject Analysis and replication of CVE-2022-23988 and CVE-2022-34265...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync Reference: https://adsecurity.org/?p=1729 Reference: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Goal: retrieve password hashes from all user accounts on a domain controller using the mimikatz DCSync function Warning：Only do this in a lab...

ADSpider

d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 //\/ ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888 888 888 888 888...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

EUVD-2026-111125

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux enables local privilege escalation . This issue specifically affects installations that are managed by a Veeam Backup & Replication instance. The root cause is associated with an Untrusted Search Path (CWE-426). No specific exploit information or remediati...

ReplicatedRandom

Node MWC1616 See README in node folder Java LCG Given a double generated from nextDouble of a java.util.Random, recreate a Random with the same state. This ReplicatedRandom can then be used to predict the future values of the original Random. Example: Random r = new Random; ReplicatedRandom rr =...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...

CVE-2021-27905

CVE-2021-27905 Sr No| Title ---|--- 1| Overview 2| Root Cause 3| Proof Of Concept 4| Mitigation 8.8.2+ 5| Reference For educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. Overview This is...

Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

PT-2026-126652

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD This repository contains the code and instructions to replicate the CVE-2019-19470 exploit discovered by CODEWHITE. Here you will find the source code of the examples I used at the HackTheBox meetup to explain my learning process and creation of this exploit. Named Pipe...

Ahsay CBS CVE-2026-105134 UpdateReceivers command injection

CVE-2026-105134: Ahsay AhsayCBS Replication Receiver POST /rps/api/json/UpdateReceivers.do passes the JSON random field into a shell command without sanitization. Supports confirm-only echo injection whoami/id when stdout is reflected in JSON, or time-based check. !/usr/bin/env python3 -- coding:...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2026-101799

A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...