elevationstation

محطة الرفع سرقة وتكرار رموز SYSTEM للمتعة والربح! نحن نكرر الأشياء، ونصنع نسخًا مزدوجة، ثم نغادر. لقد استخدمت أمر getsystem من Metasploit و PSEXEC من SysInternals للحصول على صلاحيات النظام، أليس كذلك؟ حسنًا، إليك نسخة مستقلة مشابهة لذلك... ولكن بدون مشاكل مكافحة الفيروسات... على الأقل في الوقت...

CVE-2015-5736

CVE-2015-5736 PoC for CVE-2015-5736 using ROP, PreviousMode overwrite and Token strealing for educational purposes only...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – Vol de pixels inter-origines via WebGPU par mesure de temps Aperçu Un site web malveillant utilise les mesures de temps des shaders de calcul WebGPU pour mesurer le temps de rendu d'une iframe inter-origines, récupérant ainsi les valeurs de pixels de contenus sensibles par...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A stored XSS vulnerability exists in the Event management software version 2.3.0. An attacker can leverage this vulnerability in order...

CVE-2021-46067

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...

CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Cookie Stealing Vulnerability Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2021-27965

CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...

moodle-token-stealer

Ce depot n’a pas de fichier README...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...

android-cve-2010-4804

Proof of Concept for Android Data Stealing Vulnerability. CVE-2010-4804 Original advisory...

AzTokenFinder

AzTokenFinder Это небольшой инструмент для извлечения JWT или данных, похожих на JWT из различных процессов, таких как PowerShell, Excel, Word и других. Идея была вдохновлена постом в блоге https://mrd0x.com/stealing-tokens-from-office-applications/ от потрясающего @mrd0x. В новом релизе я добави...

Venom

Venom Venom est une bibliothèque C++ qui vise à offrir un moyen alternatif de communiquer : au lieu de créer une socket qui pourrait être retracée jusqu'au processus, elle crée un nouveau processus Edge détaché et « caché » aucune fenêtre n'est affichée Edge a été choisi car c'est un navigateur...

CVE-2026-82646

WWBN AVideo is affected by an unauthenticated reflected cross-site scripting (XSS) vulnerability in the url2Embed.json.php endpoint. The root cause is that URLs containing HTML metacharacters are not properly escaped when embedded into an encrypted evideo payload, allowing an attacker to inject m...

Malicious code in idnna (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6f2ec3b09fbcf061a9f4ffefe1c179983ad8cdc0af705f2218280ade3c1da3 The package publishes under a name that closely resembles the widely-used idna package and advertises itself as 'HTTP client utilities', but the only...

Malicious code in @or-sdk/idw-skill (npm)

npm/@or-sdk/idw-skill is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

Malicious code in @or-sdk/cards (npm)

npm/@or-sdk/cards is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

Malicious code in @or-sdk/content-request (npm)

npm/@or-sdk/content-request is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @or-sdk/event-manager (npm)

npm/@or-sdk/event-manager is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in @onereach/idw-contracts (npm)

npm/@onereach/idw-contracts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11560 Malicious code in @cacheable/node-cache (npm)

npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...