CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit PoC de escritura arbitraria de archivos mediante enlaces simbólicos en 7-Zip CVE-2025-55188 Descripción Esta prueba de concepto demuestra CVE-2025-55188 , una vulnerabilidad en versiones de 7-Zip anteriores a la 25.01. El fallo se produce porque 7-Zip no maneja...

CVE-2025-0411-PoC

Más PoC en: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compilar cpp usando MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static Después de compilar, comprimir el exe con 7z, ejecutar dos veces Debido a que esta vulnerabilidad requiere interacción del usuario, el archivo...

CVE-2026-48908

🌐 Idioma / Dil 📌 Resumen SP Page Builder Joomla — Carga de ZIP sin autenticación → RCE | ---|--- Producto| SP Page Builder — comsppagebuilder JoomShaper Versión| ≤ 6.6.1 Corregido| 6.6.2+ — la carga ahora requiere admin Auth| Sin autenticación Vector| POST …&task=asset.uploadCustomIcon Campo|...

CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de RARLAB WinRAR. Se requiere interacción del usuario para explotar esta vulnerabilidad, ya que la víctima debe visitar una...

CVE-2025-24071_PoC

CVE-2025-24071 / CVE-2025-24054 PoC Nota: MICROSOFT HA RENOMBRADO CVE-2025-24071 COMO CVE-2025-24054 🤔 Resumen Esta vulnerabilidad de Windows, específicamente en 'explorer.exe', nos permite recibir un hash NetNTLMv2 de una víctima simplemente con que el atacante extraiga un archivo .zip. Uso...

Exploit-CVE-2024-31777

CVE-2024-31777 | GUnet OpenEclass PoC de carga de archivos sin restricciones en plataforma de e-learning 📜 Descripción Este script presenta una prueba de concepto PoC para CVE-2024-31777, una vulnerabilidad de seguridad descubierta en la plataforma de e-learning GUnet OpenEclass con una CVSS de 9...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

CVE-2023-50564-pluck

CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...

winDED

winDED Exploit personalizado para CVE-2023-38831 usando python. Introducción: WinRAR es un software de archivado que permite a los usuarios crear archivos comprimidos y versiones comprimidas de archivos y carpetas para que puedan transportarlos fácilmente o almacenarlos con un tamaño reducido...

7-Zip-CVE-2025-0411-POC

Vulnerabilidad de omisión de Mark-of-the-Web en 7-Zip CVE-2025-0411 - POC Detalles de CVE-2025-0411 "Esta vulnerabilidad PUNTUACIÓN CVSS 7.0 permite a atacantes remotos omitir el mecanismo de protección Mark-of-the-Web en las instalaciones afectadas de 7-Zip. Se requiere interacción del usuario...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-104437

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASHSINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects,...

CVE-2026-104424

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...

zombieguard

ZombieGuard Un escáner defensivo para la evasión de metadatos estructurales en archivos ZIP. ZombieGuard detecta contradicciones entre los encabezados de archivos locales ZIP, los registros del directorio central y las características de la carga útil. Estas contradicciones pueden utilizarse para...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

EUVD-2026-91447

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104435 Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASHSINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects,...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 are vulnerable to a consensus rule enforcement failure. The software fails to correctly apply the ZIP-244 consensus rule , specifically by accepting V5 transparent inputs signed with SIGHASH_SINGLE that do not have a corresponding output. This flaw allows...