3923 matches found
ADSpider
d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 /// ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888 888 888 888 888 888...
CVE-2023-27532
CVE-2023-27532 CVE-2023-27532 に影響を受ける Veeam Backup and Replication の PoC 技術的分析 脆弱性の技術的な根本原因分析は、次のブログでご覧いただけます: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive 概要 この PoC は、安全でない API エンドポイントを悪用して認証情報を抽出します。 使用方法 root@kitploit:...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync 参照: https://adsecurity.org/?p=1729 参照: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ 目的: mimikatz の DCSync 機能を使用して、ドメインコントローラー上のすべてのユーザーアカウントからパスワードハッシュを取得します。 警告：これはラボ環境でのみ行ってください。 mimikatz は DCSync と呼ばれるツールを実装しました。これにより、mimikatz...
WinRAR-Vulnerability-recurrence-tutorial
winrar脆弱性再現チュートリアル WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572脆弱性再現 脆弱性情報 WinRAR 6.23 または WinRAR =6.22 参考リンク： https://cn-sec.com/archives/1980228.html https://xxb.ecust.edu.cn/2023/0904/c8463a158425/page.htm 免責事項： 使用リスク：...
Veeam Backup & Replication - Unauthenticated
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...
CVE-2021-27905
CVE-2021-27905 番号| タイトル ---|--- 1| 概要 2| 根本原因 3| 概念実証 4| 緩和策 8.8.2+ 5| 参考 教育および研究目的のみに使用してください。所有していない、またはテストする明示的な許可がないシステムでこのコードを使用しないでください。誤用について私は一切責任を負いません。 概要 これはApache Solr （/replication?command=fetchindex&masterUrl=http:// Solr の ReplicationHandler は次のことを行います。 1. リクエストを受け付ける。 2. 指定された...
ReplicatedRandom
Node MWC1616 node フォルダの README を参照してください Java LCG java.util.Random の nextDouble から生成された double が与えられた場合、同じ状態を持つ Random を再現します。この ReplicatedRandom は、元の Random の将来の値を予測するために使用できます。 例: root@kitploit: Random r = new Random; ReplicatedRandom rr = new ReplicatedRandom; rr.replicateStater.nextDouble;...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
CVE-2022-28219-Like
CVE-2022-28219-Like 概念がCVE-2022-28219に類似したテスト環境を構築する。...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...