FUD-UUID-Shellcode

FUD-UUID-Shellcode Introducción Otra técnica de inyección de shellcode usando C++ que intenta evadir Windows Defender mediante hechicería de cifrado XOR y locura de cadenas UUID :. Cómo funciona Generación de shellcode Primero, genera un payload en formato binario usando ya sea Havoc, CobaltStrik...

bluesnoop

bluesnoop A simple Bluetooth Low Energy BLE sniffer using Python and the Bleak library Features Identify nearby device UUIDs and names Persistent tracking of first and last appearance Translation of cryptic model IDs Export intelligence for external analysis Demo Gallery Timed Snoop --- Limitless...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: A re-implementation of https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Uses uuids as part of the requested filename to avoid remote server crashing after first path traversal exploitation. run.py / shell.py: wrapper on top of podman to run...

bluffy

Bluffy Convierte shellcode en ✨ diferentes ✨ formatos! Bluffy es una utilidad que se utilizó en experimentos para evadir productos antivirus de forma estática formateando shellcode en formatos de datos de apariencia realista. Herramientas de prueba de concepto, como NinjaUUIDRunner de 0xBoku y...

CVE-2025-22828

CVE-2025-22828 📜 Descripción Apache CloudStack 4.16.0 y versiones posteriores presentan un problema de control de acceso roto que permite a los usuarios con conocimiento de los UUID de recursos leer o añadir comentarios anotaciones en recursos a los que no están autorizados a acceder. Los UUID...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

RDL-detect

Remote Desktop Licensing Service Detection Reference https://github.com/fortra/impacket/blob/master/examples/rpcdump.py Enumerate open services via MSRPC, and determine whether Terminal Server Licensing is included based on UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d Usage: python3 rdl-detect.py 目...

PT-2026-90431

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs uuid add file failure When nfs uuid add file races with nfs uuid put tearing down uuid-net, it returns -ENXIO without publishing nfl-nfs uuid via rcu assign pointer. nfs open local fh then enters...

CVE-2026-24134-PoC

CVE-2026-24134-PoC Overview This repository contains the Proof of Concept PoC for CVE-2026-24134 , a Broken Object Level Authorization BOLA vulnerability in StudioCMS. Contents cve202624134poc.py - Python exploitation script Prerequisites StudioCMS=0.1.1 root@kitploit: pip install requests...

CVE-2025-71417

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUSSENDPACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server...

CVE-2026-55255-Lab

CVE-2026-55255 - Langflow IDOR in /api/v1/responses Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-55255, an Insecure Direct Object Reference IDOR vulnerability affecting Langflow's OpenAI-compatible Responses API. Langflow is an open-source...

CVE-2026-86451 MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::getreferencedata without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid direct...

CVE-2026-86451 MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::getreferencedata without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid direct...

CVE-2026-86451

MISP versions ≤2.5.45 contain an insecure direct object reference (IDOR) in EventGraphTool::get_reference_data(). Authenticated users could retrieve object-reference records by UUID without the system verifying that the requester had access to the parent object , allowing retrieval of reference d...

EUVD-2026-72396

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::getreferencedata without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid direct...

CVE-2026-86283 MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data

MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...

EUVD-2026-70973

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-85389 Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints

Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another tenant's task data. Attackers can query task endpoints with arbitrary task UUIDs to retrieve work logs, comments, attachments, and project...

CVE-2026-82738 Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service

Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.Type.UUIDv7 attribute. Ash.Type.UUIDv7.castinput/2 accepts any well-formed UUID string, including non-version-7 UUIDs, and stores it as a...