249646 matches found
EUVD-2026-94976
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
CVE-2026-107612
GlavSoft TightVNC Server for Windows versions prior to 2.8.88 contains an incorrect permission assignment in its inter-process communication (IPC) mechanism. The software creates a shared memory segment in the *Global* namespace with a NULL DACL , allowing local authenticated users to read or ove...
CVE-2026-107611
GlavSoft TightVNC Viewer for Windows before version 2.8.88 is vulnerable to an out-of-bounds read in its ZRLE decoder . The issue occurs because the readPaletteRleTile() and readPackedPaletteTile() functions fail to validate attacker-supplied indices against the declared palette size. A malicious...
CVE-2018-8639-exp
CVE-2018-8639-exp platform: windows 2008 and windows 2008 R2...
Blackash-CVE-2025-24071
Blackash-CVE-2025-24071 CVE-2025-24071: NTLM Hash Leak via .library-ms File, Metasploit Module 🚨 Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. Metrics CNA: Microsoft Corporation...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Modified to get Reverse Shell with system privileges...
CVE-2023-23388
This repository contains a poc for CVE-2023-23388, which is described in this series, particularly in this post. It's an LPE in the bluetooth service aka bthserv in Windows 10/11 that allows an unprivileged user to escalate to LOCAL SERVICE. This repo doesn't contain an exploit, only a poc...
CVE-2023-31902
CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution Summary: Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 TCP and 35913 WebSocket with no authentication by default. The vulnerability allows an unauthenticated...
Tomcat_PUT_GUI_EXP
TomcatPUTEXPV1.4 Herramienta gráfica de explotación de la vulnerabilidad de escritura arbitraria de archivos mediante el método PUT de Tomcat CVE-2017-12615 Introducción a la vulnerabilidad El 19 de septiembre de 2017, Apache Tomcat confirmó y corrigió oficialmente dos vulnerabilidades de alto...
WinRAR-CVE-2025-8088-Exploitation-Toolkit
☠️ Herramienta de Explotación de WinRAR CVE-2025-8088 ☠️ ACCESO AL SISTEMA: CONCEDIDO OBJETIVO: VULNERABILIDAD DE WINRAR Una sofisticada herramienta GUI de nivel militar diseñada para crear archivos RAR maliciosos que explotan la vulnerabilidad de path traversal de WinRAR CVE-2025-8088. Esta...
CVE-2023-21768-dotnet
CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-EoP exploit References: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Why? Sometimes you can't use compiled binaries. How to? Run the following in...
CVE-2019-0708
CVE-2019-0708 exploit inicial para CVE-2019-0708, BlueKeep CVE-2019-0708 BlueKeep RDP Remoto Windows Kernel Use After Free El controlador RDP termdd.sys maneja incorrectamente los enlaces al canal interno MST120, permitiendo que un mensaje de Indicación de Desconexión de Proveedor malformado caus...
pulse-secure-vpn-mitm-research
pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...
CVE-2022-24934
CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...
CVE-2024-4577
CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...
CVE-2019-2729
CVE-2019-2729 Exploit code for CVE-2019-2729 Oracle Weblogic running on Windows. Can create a callback to a CobaltStrike listener or a Metasploit handler with payload windows/meterpreter/reversetcp Also have a non-beacon exploit that just executes commands on the underlying host. exploit.py. This...
CVE-2021-34481
CVE-2021-34481 Verificar parche para CVE-2021-34481 Vulnerabilidad de ejecución remota de código en Print Spooler de Windows https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...
CVE-2022-39959
CVE-2022-39959 Vendor Afectado - Panini https://www.panini.com/en Producto Afectado - Panini Everest Engine Versión Afectada - 2.0.4 Existe una ruta de servicio sin comillas Unquoted Service Path en Everest Engine EverestEngine.exe en la versión 2.0.4 en Windows. Esto permite que un usuario local...
CVE-2022-30190-Follina-Lab
🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...