308720 matches found
EUVD-2026-102820
The DoubleScale | All-in-One CRM β Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the storeupload function. This is due to a fail-open extension...
CVE-2026-111311
The DoubleScale | All-in-One CRM plugin for WordPress (versions up to and including 1.5.1 ) is vulnerable to Arbitrary File Upload via the store_upload function. The root cause is a fail-open extension allow-list in extension_is_allowed() which returns true when wp_check_filetype() yields an empt...
CVE-2026-111311 DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint
The DoubleScale | All-in-One CRM β Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the storeupload function. This is due to a fail-open extension...
CVE-2026-111311 DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint
The DoubleScale | All-in-One CRM β Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the storeupload function. This is due to a fail-open extension...
QuantumLock
QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...
sunsetscan
SunsetScan Network security auditing for humans β powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...
thm-ice-icecast-rce-privesc
TryHackMe β Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...
CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille-
Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass rouille Assigned CVE ID: CVE-2026-67182 Summary rouille::proxy::proxy and rouille::proxy::fullproxy copy client-supplied request header values into the upstream connection without checking them for control character...
CVE-2025-5548
Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven β Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...
smbtakeover
smbtakeover A technique to unbind and rebind 445/tcp on Windows without loading a driver, loading a module into LSASS, or rebooting the target machine. Implemented to ease the burden of SMB-based NTLM relays while operating over C2. Technical analysis of the technique is dicussed in more detail...
WHS4_CVE-2021-4034
CVE-2021-4034 PwnKit - Local Privilege Escalation PoC π Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task π Overview CVE-2021-4034 is a local privilege escalation...
CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-
Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization rouille Assigned CVE ID: CVE-2026-67181 Summary rouille::proxy::proxy forwards the client's Transfer-Encoding header to the backend unchanged, but writes the request body that tinyhttp has already de-chunked. It nev...
cve-2025-62215-exploit-poc
CVE-2025-62215 Proof-of-Concept β οΈ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
hsm
zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...
bochscpu-python
bochscpu-python Python bindings for @yrp's BochsCPU using FFI to easily and accurately emulate x86 code. Install bochscpu-python requires a Python environment of 3.8 or more recent only. Via PyPI preferred By far the simplest way to get things up and running is using the stable packaged version o...
netscout
NetScout NetScout is an OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL. It consists of the following components: BinaryEdge client: Gets subdomains DNS: Attempts to perform a DNS zone transfer to extract subdomains Crawler: Gets URLs and directori...
Hook-PasswordChangeNotify
Hook-PasswordChangeNotify 1. Execute the following command in PowerShell: Import-Module .\Invoke-ReflectivePEInjection.ps1 Invoke-ReflectivePEInjection -PEPath HookPasswordChange.dll -procname lsass 2. When a user on the target machine changes their password, the new password will be written to...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync Reference: https://adsecurity.org/?p=1729 Reference: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Goal: retrieve password hashes from all user accounts on a domain controller using the mimikatz DCSync function WarningοΌOnly do this in a lab...
CVE-2026-104715 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...