CVE-2025-33053-POC

CVE-2025-33053 - WebDAV 远程代码执行（RCE）PoC 与 C2 模拟 ⚠️ 仅供教育用途 本项目演示了利用 WebDAV 和 .url 文件投递实现真实远程代码执行的概念验证。其中包含一个基于诱饵的可执行文件，以及对命令与控制（C2）能力的受控模拟。不共享任何恶意载荷。 📜 摘要 本仓库包含 CVE-2025-33053 的 PoC，该漏洞涉及 Windows 处理指向 WebDAV 共享的 .url 文件的方式。该 PoC 演示了攻击者如何能够： 通过 ZIP（Invoice.pdf.zip）投递 .url 快捷方式 触发托管在 WebDAV 容器上的载荷执行...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra 通过 CVE-2024-21412 传递恶意软件 usage 依次启动服务，并访问 web server webserver 在文件夹内启动 web server: python -m http.server Initial Access: 使用 Windows 高级查询语法（AQS）链接回 WebDAV 共享的 JPEG 木马。 Initial Access：使用 search: 协议来自定义 Windows 资源管理器窗口 它使用 search: 应用协议搜索来执行照片搜索 它使用 crumb 参数来限制搜索范围到恶意的 WebDA...

PT-2026-41960

Name of the Vulnerable Software and Affected Versions zrok affected versions not specified Description A path traversal issue exists when using the zrok2 copy command to move files from a WebDAV or zrok drive to a local filesystem. An attacker can provide a malicious DAV href containing directory...

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra aka DarkCasino targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails...

Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

Exploit Title: Real Player 16.0.3.51 - 'external::Import' Directory Traversal to Remote Code Execution RCE Google Dork: n/a Date: May 31, 2022 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: ver. 16.00.282, 16.0.3.51, Cloud 17.0.9.17,...

Microsoft Internet Explorer ShowSaveFileDialog DLL Loading Arbitrary Code Execution Vulnerability

Microsoft Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer suffers from an arbitrary code execution vulnerability in its implementation, which can be exploited by an attacker who places a file in a remotely accessible UNC or WebDAV share location to execute arbitrary...

HyperAccess - Multiple Vulnerabilities

Not long now... ======================================================================== = Hyper Access - Multiple Vulnerabilities = = Vendor Website: = http://www.hilgraeve.com = = Affected Software: = Hyper Access 8.4 and possibly lower = = Public disclosure on Thursday December 14, 2006...