6684 matches found
CVE-2021-31956
CVE-2021-31956 pretty stable exploit on win10 20h2 creates new console window so change that if you don't like oh and more importantly, change the createfilea path to an actual writeable directory on disk...
packetStrider
Packet Strider v0.21 Resumen packetStrider para SSH es una herramienta de análisis forense de paquetes que busca proporcionar información valiosa sobre la naturaleza del tráfico SSH, iluminando los rincones del tráfico de red SSH donde antes yacían pepitas de oro de información en la oscuridad. E...
BITB
BITB Plantillas de navegador para el ataque Browser In The Browser BITB. Más información: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Uso Cada carpeta tiene un archivo index.html que tiene 4 variables que deben modificarse: XX-TITLE-XX - El título que se muestra en la página ej...
EUVD-2026-93351
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxereregusermr reassigns mr-ibmr.pd first and only then validates the IBMRREREGACCESS argument: if flags & IBMRREREGPD rxeputoldpd; rxegetpd; mr-ibmr.pd = ibpd; if flags...
CVE-2019-10779
CVE-2019-10779 GCHQ Stroom es vulnerable a Cross-Site Scripting debido a la capacidad de cargar el dashboard de Stroom en otro sitio y a la protección insuficiente contra los orígenes de eventos de ventana...
cve-2019-1458_POC
CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild1. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to t...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb Exploit Tool Author : polar bear Version : 2.1 Applicable Vulnerability : CVE-2026-49975 HTTP/2 Protocol Memory Bomb 📖 Vulnerability Principle CVE-2026-49975 is a memory exhaustion vulnerability in the HTTP/2 protocol implementation. The attack chain consists of two key...
CVE-2022-37706-LPE-exploit
CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...
TeamViewer-dumper-in-CPP
TeamViewer-dumper-in-CPP Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows. Compilation and requirements 1. Compile with CL 2. cl TeamViewerDump.cpp 3. or with cl TeamViewerDump.cpp /EHsc 4. Requirements 5. TeamViewer must be running...
Follina
Follina Notes related to CVE-2022-30190 FOLLINA: CVE-2022-30190 1. Uses Microsoft Support Diagnostic Tool MSDT 2. Exploits diagnostic window opened for Diagnosis and when executed properly, gives reverse shell to attacker. 3. Github: a. https://github.com/JohnHammond/msdt-follina b...
WindowSpy
WindowSpy 👀 WindowSpy es un archivo objeto de baliza Beacon Object File de Cobalt Strike diseñado para la vigilancia selectiva de usuarios. El objetivo de este proyecto era activar capacidades de vigilancia solo en ciertos objetivos, por ejemplo, páginas de inicio de sesión del navegador,...
CVE-2022-37706
CVE-2022-37706 Exploit for CVE-2022-37706, a 0-day in one of the main window managers of Linux - Enlightenment https://www.enlightenment.org/. All Credit to MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. This is a copy of the exploit for CTFs...
CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE
CVE-2026-4040 – Race Condition in File Upload Leading to RCE Program Code Python Flask uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR, existok=True...
CVE-2024-30051
CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thesis Research -orange Heap-based Buffer Overflow in Windows Desktop Window Manager dwmcore.dll Local Privilege Escalation → Integrity Level SYSTEM via DWM process Build target: Windows 11 22H2 10.0.22621.3447 · Patch: KB5037771 Descripti...
CVE-2019-8014
CVE-2019-8014 的一点简单分析。 包含 Poc 和 exp Shellcode 是弹出计算器 or CMD 窗口，不记得了。 注意： my.7z 是触发漏洞需要的 bmp 图片 ，文件太大了，我压缩了一下。...
cve-2025-5915
CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...
CVE-2024-23997
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...
[SECURITY] Fedora 45 Update: soundtracker-1.0.5-5.fc45
Soundtracker is a module tracker for the X Window System similar to the DOS program FastTracker'. Soundtracker is based on the XM file format. The user interface makes use of GTK2...
[SECURITY] Fedora 45 Update: openbox-3.6.1-32.fc45
Openbox is a window manager designed explicity for standards-compliance and speed. It is fast, lightweight, and heavily configurable using XML for its configuration data. It has many features that make it unique among window managers: window resistance, chainable key bindings, customizable mouse...