CVE-2023-38146-Poc

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Themes Heavily inspired by https://github.com/gabe-k/themebleed which only runs on windows the reason why i decided to write this. Used modified code from the impacket smbserver.py...

CVE-2018-10583

CVE-2018-10583 Una vulnerabilidad de divulgación de información ocurre cuando LibreOffice 6.0.3 y Apache OpenOffice Writer 4.1.5 procesan automáticamente e inician una conexión SMB incrustada en un archivo malicioso, como se demuestra con "xlink:href=file://192.168.0.2/test.jpg" dentro de un...

CVE-2026-33829

CVE-2026-33829 This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler. The script acts as a passive listener, using tcpdump to capture outgoing...

CVE-2024-43451-POC

Description Name : CVE-2024-43451 CVSSv3 Score : 6.5 Affected Versions : All Microsoft Windows versions before the Nov 2024 Patch CVE-2024-43451 is a zero-day vulnerability in Microsoft Windows that allows attackers to capture NTLMv2 password hashes with minimal interaction from the user,...

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Estudio de caso de vulnerabilidad: CVE-2026-33829 Coerción NTLM en la Herramienta Recortes de Windows Resumen ejecutivo Este informe detalla la reproducción técnica de CVE-2026-33829 , una vulnerabilidad de divulgación de información en el marco de la moderna aplicación...

CVE-2021-3456

CVE-2021-3456 A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance The Beginning: Crafting a PDF Payload It all begins on the front end of the attack. Using PowerShell’s built‑in WScript object we embed a script inside a PDF that will be...

CVE-2025-24071

CVE-2025-24071 Este script de Python está diseñado para demostrar la vulnerabilidad CVE-2025-24071 en el Explorador de Windows. Esta vulnerabilidad permite a un atacante capturar credenciales netNTLMv2 de una víctima sin ninguna interacción directa de la misma. Descripción La vulnerabilidad...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 es una vulnerabilidad crítica de ejecución remota de código en Microsoft Outlook versiones que incluyen Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 antes del parche de febrero de 2024. Permite a un atacante no autenticado eludir la Vista Protegida de Outlook enviando un...

Email-exploit-Moniker-Link-CVE-2024-21413-

Exploit de correo electrónico Moniker Link-CVE-2024-21413-Module — Documentación Resumen: Un PoC práctico que demuestra el uso de un Moniker Link en un correo HTML para desencadenar una conexión SMB desde Outlook, permitiendo capturar el hash netNTLMv2 de la víctima mediante Responder. Esto...

CVE-2023-23397

CVE-2023-23397 Prueba de concepto Este es un exploit de prueba de concepto PoC para CVE-2023-23397, una vulnerabilidad en el cliente de Windows Microsoft Outlook. Requisitos previos Python 3 paquete pywin32 Cómo usar Windows 1. Instale el paquete pywin32 requerido ejecutando pip install pywin32. ...

CVE-2025-24054-PoC

CVE-2025-24054 PoC A simple Proof of Concept for CVE-2025-24054 – Windows Library .library-ms NTLM Hash Disclosure Vulnerability. ⚠️ For Educational and Authorized Lab Use Only Description CVE-2025-24054 allows an attacker to force a Windows system to leak the victim's Net-NTLMv2 hash by using a...

OESA-2026-3733 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

openSUSE 16: curl / curl-fish-completion / curl-zsh-completion / libcurl-devel / etc (openSUSE-SU-2026:21774-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21774-1 advisory. - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926:...

Security update for curl

This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...

SUSE-SU-2026:23498-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

OPENSUSE-SU-2026:21774-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

OESA-2026-3622 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

SUSE-SU-2026:3958-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can...

SUSE-SU-2026:23361-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. Changes for curl: - Call httpsize first to prioritize...

SUSE-SU-2026:23350-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. Changes for curl: - Call httpsize first to prioritize...