MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! 이 취약점은 Primefort Private Limited의 Sudhakar Muthumani, Khiem Tran에 의해 동시에 발견되거나 차용되었으며 CVE-2022-22600으로 등록되었습니다. 이는 제가 2021년에 이미 Apple에 이메일을 보냈음에도 불구하고 발생한 일입니다. 영향을 받는 버전 학생으로서 저는 이 취약점을 테스트할 수 있는 기기에 제한적으로 접근할 수 있습니다. 지금까지 테스트한 버전은 MacOS 12.1, MacOS 12.0, MacOS...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 BlueKeep 취약점 배치 스캐닝 도구 및 POC, 현재는 블루 스크린만 가능합니다. 0x01 스캔 - windows 사용법： rdpscan.exe ip1-ip2 .\rdpscan.exe 192.168.1.1-192.168.1.2 192.168.1.1 - VULNERABLE - CVE-2019-0708 192.168.1.2 - SAFE - CredSSP/NLA required rdpscan.exe --file ip.txt .\rdpscan.exe --file ip.txt...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_0824)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230824 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728...

CentOS Linux 7 [TuxCare] Security Update: screen (CENTOS7:CLSA-2026:1776934758)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1776934758 advisory. - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local use...

Rocky Linux 8 [CIQ] Security Update: baobab / baobab-debuginfo / baobab-debugsource / clutter / etc Multiple Vulnerabilities (crlsa-2020_1766)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201766 advisory. LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 gdm: lock screen bypass when timed login is enabled...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2023_0808)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230808 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728...

CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

EUVD-2026-90252

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

PT-2026-103514

Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1-3 Description NodeService capture handlers lack proper authorization, allowing connected gateways or agents to perform unauthorized captures without consent prompts. An attacker can use the node...

Rocky Linux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc (ALMALINUX9.6:CLSA-2026:1777056907)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777056907 advisory. - In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell CVE-2026-64638 （ XSS2Shell ）の技術分析と防御的緩和マトリクス。WordPress Core の認証画面におけるパース処理の重大な不整合を悪用し、認証前の反射型 Cross-Site Scripting（XSS）をブラウザのプリミティブと連鎖させ、リモートコード実行（RCE）にまで到達させるものです。 🛠️ エグゼクティブサマリー ベクターID: CVE-2026-64638 コードネーム: XSS2Shell 深刻度: 高（CVSS 4.0: 8.9） CWE分類:...

CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing の認証前 root ファイル読み取り（読み取り専用 PoC） 読み取り専用の概念実証。 認証バイパスを、脆弱なホストから root のみが 読み取れるファイルを読み取ることで実証します。ターゲットには何も書き込みません。LaunchDaemon、 シェル起動ファイル、crontab、RCE チェーンは一切ありません。 所有する Mac（macOS Tahoe 26.5.2、パッチ未適用）に対して実行。シリアル番号は伏せています。 概要 screensharingd — macOS の 画面共有 / Apple...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit MS HTTPプロトコルスタックのRCE脆弱性（CVE-2021-31166）のエクスプロイト 特別に細工されたHTTPリクエストを脆弱なWindowsバージョンに送信すると、DoS攻撃が発生します。そして、サーバーはブルースクリーンエラーで再起動します。 Http.sysは、HTTPリクエストを処理し、それに対する応答を作成するWindowsカーネルドライバです。 この脆弱なhttp.sysドライバは、細工された「Accept-Encoding」ヘッダーを処理できず、クラッシュします。その結果、サーバーが再起動します。...

PTP-RAT

PTP-RAT 화면 인터페이스를 통해 데이터를 유출합니다 도구 작동 방식에 대한 자세한 정보는 https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/ 에서 확인할 수 있습니다...

CVE-2024-38856-Apache-OFBiz

CVE-2024-38856 — Apache OFBiz 저장소 문서 저장소 목적: CVE-2024-38856 Apache OFBiz 잘못된 권한 부여 / 사전 인증 RCE에 대한 정보 제공 문서. 이 저장소는 무기화된 익스플로잇 코드를 포함하지 않습니다. 방어 연구, 패치 지침, 탐지 및 안전한 실습 테스트 전용입니다. 개요 CVE-2024-38856 은 Apache OFBiz의 잘못된 권한 부여 취약점으로, 인증되지 않은 사용자가 특정 엔드포인트에 접근하고 특정 조건에서 화면 렌더링 코드를 실행하여 원격 코드 실행을 가능하게 ...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 대량 블루스크린 장난 테스트 환경: win7, win2008, win2008r2 사용법: python bluekeep.py -u ./당신의파일.txt -b 64컴퓨터 시스템 비트 수...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient 테스트 프로그램 monitorclfssys clfs의 모든 IRP 요청을 모니터링하는 드라이버 poc Crash 블루스크린 poc LPE win10poc win11poc 컴파일 기본 정보 Windows SDK 버전 ：10.0 최신 설치 버전 플랫폼 도구 집합: Visual Studio 2022 v143 C++ 언어 표준 : 기본ISO C++14 표준...

CVE-2026-101062: Incorrect Authorization

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...

PerceptFence: Content-Mediation Architecture and Deterministic Coverage for Screen-Share AI Assistants

Live screen-share AI assistants observe raw screen and speech streams, but users have little runtime control over what an assistant may observe, retain, or disclose. Prompt-level privacy settings are insufficient because sensitive content enters through the capture stream. We present PerceptFence...