ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 利用包装器 MS09-050 CVE-2009-3103 漏洞利用的一行设置。无需折腾，无需调试，直接生效。 为什么？ 大多数流传的 MS09-050 脚本需要手动注入 shellcode，与处理程序存在时序问题，或者干脆无法运行。本包装器： 生成带正确参数的 shellcode 自动构建漏洞利用代码 创建可直接使用的 Metasploit 处理程序 精确告知需要运行的命令 专为 OSCP 备考打造，时间至关重要。 目标 漏洞 : MS09-050 / CVE-2009-3103 影响范围 : Windows Vista SP1/SP2, Windows...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自動シェルアップロード WordPress Royal Elementor 1.3.78 シェルアップロード Visit https://phankz.com...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType 可変フォント生成エクスプロイト このリポジトリには、Hack The Box の VariaType マシン向けの特化型エクスプロイトが含まれています。このエクスプロイトは、fontTools ライブラリまたは Web アプリケーションが .designspace XML ファイルとメタデータの補間を処理する方法における脆弱性を悪用して、リモートコード実行 RCE を達成します。 📝 説明 脆弱性はフォント生成プロセスに存在します。悪意のある designspace ファイルを細工することで、PHP...

CVE-2026-82369

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell...

EUVD-2026-85659

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell...

CVE-2026-82369 Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell...

CVE-2026-82369

Brocade SANnav suffers from a vulnerability where insufficient input sanitization of shell metacharacters in the CLI scripting component allows authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can exploit this fl...

CVE-2026-82369 Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell...

DEBIAN-CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

Summary An authenticated user can execute arbitrary operating system commands on the openc3-cosmos-cmd-tlm-api service. The pypiurl setting is interpolated, unescaped, into a command line that is run through a shell backtick when a plugin is installed. Shell metacharacters in the setting value ar...

CVE-2026-77601

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.12.0 until 7.3.0, an authenticated actor can write the pypiurl setting through setsetting at POST /openc3-api/api, then cause OpenC3::PluginModel.installphase2 in...

HimitsuShell

翻訳版です。問題があればIssueでお知らせください。 README: English | 中文 | 日本語 | 한국어 HimitsuShell カーネルトレースからも見えないシェルスクリプト。 シェルスクリプトを、組み込みインタプリタ・LLVMベースの難読化・アンチデバッグ保護を備えた単一の静的バイナリに変換します（shcの代替）。 ブロックフローグラフ（Ghidra） 使い方 root@kitploit: 1. download docker image x8664linuxmusl curl -LO...

CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

CVE-2026-93349

Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...

CVE-2026-93349 Frictionless OS Command Injection via explore Console Command

Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...

CVE-2019-7069-POC

Kibana ⚠️ 면책 조항: 이 스크립트는 교육 및 승인된 침투 테스트 용도로만 사용하십시오. 소유하지 않거나 명시적 테스트 허가를 받지 않은 시스템에서 사용하지 마십시오. 저자와 기여자는 이 도구의 오용 또는 손해에 대해 책임을 지지 않습니다. 🎯 이게 뭔가요? 이것은 Kibana 버전 6.6.1의 원격 코드 실행 취약점 을 위한 Python 3 익스플로잇 스크립트입니다. 프로토타입 오염 결함을 이용하여 취약한 Kibana 인스턴스에서 임의 명령을 실행하며, 리버스 셸을 생성하는 옵션도 포함합니다. 🕹️ 기능 Kibana 버전...

ish

iSH 사용자 모드 x86 에뮬레이션과 시스템 call 번역을 사용하여 iOS 에서 리눅스 쉘을 실행할 수 있게 해줍니다. 프로젝트의 현황을 알고 싶으시면 커밋 로그와 이슈 탭을 참고해주세요. 애플 앱스토어 TestFlight beta Discord server 도움 문서 Wiki README중문 Hacking 해당 프로젝트는 깃의 서브 모듈이 있습니다. 해당 저장소를 받은 후 --recurse-submodules 또는 git submodule update --init 을 입력하여 깃 서브 모듈을 클론하세요. 아래 사항은 이...

ish

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

CVE-2025-8110-PoC

CVE-2025-8110 PoC CVE-2025-8110 向けの Python 概念実証スクリプト — Gogs v0.13.3 の UpdateRepoFile シンボリックリンク RCE。シングルショット: 悪意のある PUT 自体が git fetch → sshCommand → リバースシェルをトリガーします。 ⚠️ 教育目的および許可を得たセキュリティ研究のみを対象としています。 このツールを、所有していない、または書面によるテスト許可がないシステムに対して実行することは違法です。 詳細 CVE-2025-8110 の PoC 影響を受けるバージョン: Gogs...