17234 matches found
LumisXP - Cross-site Scripting
A cross-site scripting XSS vulnerability in the XsltResultControllerHtml.jsp component of LumisXP v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via the lumPageID parameter. id: CVE-2024-33326 info: name: LumisXP - Cross-site Scripting author: 0xr2r severity: medium...
cve-2019-0708_bluekeep_rce
Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...
CVE-2005-0575-knet-exploit
CVE-2005-0575 KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run ! made in the past, I forgot when I made it...
XPKeygen
XPKeygen A Windows XP / Windows Server 2003 VLK key generator. This tool allows you to generate valid Windows XP keys based on the Raw Product Key , which can be random. The Raw Product Key RPK is supplied in form of 9 digits XXX-YYYYYY and is only necessary to generate a Windows XP Key. Download...
CVE-2019-0708-POC
CVE-2019-0708-POC Affected Versions Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows Server 2003 Windows XP Must enable: Remote Desktop Port 3389, disable firewall This POC and scan tool are sourced from the internet. If any infringement occurs, please contact to delete. Affected syst...
PCmanBoF
PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...
CVE-2025-53690-Analysis
CVE-2025-53690: Sitecore ViewState Deserialization Vulnerability Analysis Overview CVE-2025-53690 is a critical ViewState deserialization vulnerability discovered in the Sitecore product suite, allowing remote code execution by exploiting exposed ASP.NET machine keys. Basic Information CVE ID :...
CVE-2018-8120
CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Tested support: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 The original exp does not support xp, 2003. This code adds support for these two systems based on...
CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment
CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...
CVE-2019-0708-PoC-Hitting-Path
CVE-2019-0708-PoC-Hitting-Path Really Really Bad, don't judge this code hahaha it's terrible It's only hitting vulnerable path in termdd.sys!!! NOT DOS Tested only on Windows XP Sp3 x86, Windows 7 will need negotiation part probably so it won't work I hope that work at all Maybe it will be useful...
TinyXPB
TinyXPB REQUIREMENTS: A Virtual Machine or Bochs running XP SP3 XP SP0 will not work, other versions may USAGE: 1. run build.bat 2. copy floppy.img to wherever you wish to use it 3. set virtual machine / bochs to boot from floppy.img 4. Boot! EXECUTABLES: Tools\MakeImage\imagefs.exe - Commandline...
MS12-020-CVE-2012-0002
https://github.com/xiaoxiaoleo/windows-kernel-exploits/blob/2892a653297ccbbab8b2690cf7c9e302d7ffe03f/MS12-020 https://max.book118.com/html/2016/0314/37644373.shtm https://github.com/JYanger/MS12-020-Check/blob/master/ms12-020one.py https://blog.csdn.net/qq73252299/article/details/133156450 صWindo...
WindowsFirewallHookDriverEnumeration
Windows Firewall Hook Driver Enumeration Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003. We've seen a malicious code sample which uses this technique. The Hooking Technique The Windows Firewall Hook functionality in XP/2003 technique 12345 uses an IOCTL of...
CVE-2025-53691
CVE-2025-53691: Remote code execution RCE through insecure deserialization The same reflection mechanism in the AjaxScriptManager can be used to invoke the ProcessSerializedData method. This method deserializes a provided payload using the insecure BinaryFormatter, leading to RCE. An attacker can...
CVE-Vulnerability-Research-Exploit-Analysis
CVE-Vulnerability-Research-Exploit-Analysis A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits...
Exploit-CVE-2014-4113
Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...
CVE-2025-53690
CVE-2025-53690 Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Code Injection.This issue affects Experience Manager XM: through 9.0; Experience Platform XP: through 9.0. How does this detection method work? This Nuclei...
CVE-2019-0708
CVE-2019-0708 Exploit on Windows. Usage：C:\CVE-2019-07-08.exe -p 3389 ip Infected: Windows XP All Windows 2003 All Windows 7 SP 1 32 And 64 Bit Windows Server 2008 Windows Server 2008 R2 Contact: Email: [email protected] Website: http://794911175 http://cia.kim:2 CVE-2019-0708, Wormable...
prefetch-hash-cracker
Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...