9139 matches found
CVE-2020-27955-LFS-main
Git-lfs эксплойт удалённого выполнения кода RCE CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows на: git...
CVE-2019-12475
CVE-2019-12475 Хранимая XSS в MicroStrategy Web до версии 10.4.6 Автор: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 Хранимая XSS в метрике срабатывает при открытии редактора Visual Threshold. Сообщено вендору в 2017 году и быстро исправлено в версии 10.4.6...
elmocut
elmoCut Красивый ARP-спуфер для Windows...
iKy
Description | Installation | Site Web | Modules | Problèmes | Soutien iKy Description Le projet iKy est un outil qui collecte des informations à partir d'un e-mail et affiche les résultats dans une interface visuelle agréable. Visitez la page Gitlab du Projet Vidéo de démonstration Modules...
CVE-2025-31324
CVE-2025-31324 PoC, разработанный для эксплуатации CVE-2025-31324. Использование root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this...
wanderer
Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...
systeminformer
System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...
CVE-2021-38163
CVE-2021-38163 CVE-2021-38163 - эксплойт для SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT версии - 7.30, 7.31, 7.40, 7.50, без ограничений, злоумышленник, аутентифицированный как неадминистративный пользователь, может загрузить вредоносный файл по сети и запустить его обработку, что способн...
visual-forensic-steganography
Stéganographie Forensique Visuelle L'outil VFS permet de réaliser des attaques visuelles sur différents formats d'images numériques. Cette fonctionnalité est très utile pour détecter l'utilisation de certaines techniques stéganographiques, notamment LSB Least Significant Bit, et pour les analyste...
lykan
lykan Lykan est un programme d'analyse de fuites écrit en C qui génère des graphiques visuels des données analysées. Il prend en entrée des fichiers bruts de mots de passe texte où les mots de passe sont séparés par '\n' et extrait des informations statistiques sur ces fichiers, notamment les mot...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation
The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...
Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...
WordPress Visual Form Builder <3.0.8 - Information Disclosure
WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. id: CVE-2022-0140 info: name:...
Burp_CVE-2025-31324
Extension Burp Suite CVE-2025-31324 Aperçu Cette extension Burp Suite basée sur Python est conçue pour détecter la présence de CVE-2025-31324 , une vulnérabilité critique dans le composant Metadata Uploader du Visual Composer SAP NetWeaver. La vulnérabilité permet une exécution de code à distance...
maldev-for-dummies
Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...
kekeo
kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...
CVE-2020-27955
Exploit d'exécution de code à distance RCE Git-lfs CVE-2020-27955 version .bat / powershell Vulnérable : git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Découvert par Dawid Golunski https://legalhackers.com https://exploitbox.io Testé sur Windows sur :...
CVE-2018-8172
CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 Уязвимость удаленного выполнения кода http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...