Gitea Container Registry - Unauthorized Private Image Access

Gitea = 1.26.2. As a temporary workaround, set REQUIRESIGNINVIEW=true in gitea app.ini, though this blocks all anonymous access including public repos. reference: - https://blog.gitea.com/release-of-1.26.2/ - https://github.com/go-gitea/gitea/pull/37290 -...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: apache-tika, apicurio-registry, gradle, tez, keycloak, wildfly, dependency-track, scala, infinispan, apache-nifi-registry, cass-config-builder, apache-nifi, sonarqube, keycloak-config-cli, druid, trino, strimzi-kafka-operator, spark, logstash, spdx-tools-java, akhq,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: apache-tika, apicurio-registry, gradle, tez, keycloak, wildfly, dependency-track, scala, infinispan, apache-nifi-registry, cass-config-builder, apache-nifi, sonarqube, keycloak-config-cli, druid, trino, strimzi-kafka-operator, spark, logstash, spdx-tools-java, akhq,...

CVE-2024-4573-Mitigation-Script

CVE-2024-4573-Mitigation-Script CVE-2024-43451 is a vulnerability in systems that allow NTLM authentication, a legacy protocol that can be exploited for credential relay attacks or brute force attacks. This vulnerability arises when NTLM is enabled, leaving systems susceptible to unauthorized...

CVE-2022-30190_Temporary_Fix

🩹CVE-2022-30190 Temporary Fix🩹 These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability Follina Both can be programmed better, but this is just to implement it as quickly as possible and I did it without much Python knowledge,...

LAB-DFIR-cve-2023-38831

LAB-DFIR-cve-2023-38831 This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of...

Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln WinVerifyTrust 署名検証の脆弱性、CVE-2013-39001、QID-3783322 を修正します この修正は64ビット版 Windows コンピュータを対象としています このPowerShellコードは、この脆弱性を修正する方法の1つです。別の方法としては、.regファイルを作成して reg import を使用し、新しいレジストリキーをインポートする方法があります。 完全パッケージ版スクリプト:...

Follina-Workaround-CVE-2022-30190

Follina workaround CVE-2022-30190 Description These two scripts can be used to apply the workaround provided by Microsoft to mitigate the vulnerability CVE-2022-30190 as detailed in the MSRC blog and to restore the workaround, should an official patch be released. The first script...

CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama with rogue registry server Learn from Probllama: Ollama Remote Code Execution Vulnerability CVE-2024-37032 – Overview and Mitigations Vulnerability environment docker run -d -v ollama:/root/.ollama -p 11434:11434 --name ollama ollama/ollama:0.1.33 Rogue...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell Script to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment. Steps Download the script, run it with Admin Privileges, reboot the machine...

CVE-2024-43583-PoC

CVE-2024-43583 - Windows Privilege Escalation Exploit Author: No0B@ckSappi3 Instagram: No0BackSappi3 Overview CVE-2024-43583 is an elevation of privilege vulnerability affecting Microsoft's Winlogon component. Exploiting this flaw allows a low-privileged user to escalate their privileges to SYSTE...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft Signed PowerShell scripts List of all the signed scripts available in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accessing the file By default the files cannot be accessed. You need the TrustedInstaller privilege...

persistence-info.github.io

The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...

BOF_Collection

BOFCollection さまざまな Cobalt Strike BOF 必要条件 beacon.h コンパイル手順とBOFの概要については、help-bof を参照してください。 ActiveDirectory GetDomainInfo.c 現在のドメインとドメインコントローラーに関する情報を返します。 inline-execute GetDomainInfo.o Collection GetClipboard.c クリップボード上のテキストを表示します。 inline-execute GetClipboard.o dumpwifi.c...

MoreImpacketExamples

MoreImpacketExamples This repository contains a few short python scripts that were created using the Impacket library. The primary goal of this project is to help myself and others who are looking to transition from using the provided impacket examples to modifying/creating scripts of their own...

[SECURITY] Fedora 43 Update: docker-distribution-3.1.2-1.fc43

The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...

[SECURITY] Fedora 44 Update: docker-distribution-3.1.2-1.fc44

The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...

[SECURITY] Fedora 45 Update: docker-distribution-3.1.2-1.fc45

The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...

VMwareCloak

VMwareCloak A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ; The script accomplishes this by doing the following: Renames several...

slui-file-handler-hijack-privilege-escalation

Slui ファイルハンドラハイジャック LPE エクスプロイト情報| ---|--- 日付| 15.01.2018 パッチ適用済み| Windows 10 20H1 19041 exploit-db| 44830 テスト済み| Windows 8-10、x86/x64 非依存 説明 slui.exe は自動昇格バイナリであり、ファイルハンドラのハイジャックに対して脆弱です。 実行時に HKCU\Software\Classes\exefile\shell\open...