CVE-2025-55182-react2shell

react2shell CVE-2025-55182 ツールキット。RSC ペイロードインジェクションによる Next.js の未認証 RCE のスキャナ + エクスプロイト。 Node.js エクスプロイト: 依存関係ゼロ。 Bash スキャナ: 単一 URL または一括リストをチェックします。 エクスプロイト Single command with output ./react2shell.mjs -t http://target:3000 -c "id" Interactive pseudo-shell ./react2shell.mjs -t http://target:3000...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 or 6.0 - リモートコード実行エクスプロイト 依存関係をインストールするには、以下を実行します： git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt エクスプロイトの使用方法は次のとおりです： $ python primefaces.py -h...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1783354657)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783354657 advisory. - The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1785422092)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785422092 advisory. - In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However,...

Rocky Linux 9.6 [TuxCare] Security Update: libreswan (ALMALINUX9.6:CLSA-2026:1785496521)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785496521 advisory. - In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However,...

Rocky Linux 8 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (crlsa-2023_3584)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233584 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (crlsa-2023_3559)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233559 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc Multiple Vulnerabilities (crlsa-2026_64823)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202664823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

AlmaLinux 9.6 [TuxCare] Security Update: libreswan (ALMALINUX9.6:CLSA-2026:1785496521)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785496521 advisory. - In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However,...

Rocky Linux 9 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc Multiple Vulnerabilities (crlsa-2026_64824)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202664824 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

Rocky Linux 9 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc Multiple Vulnerabilities (crlsa-2026_65120)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665120 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource (crlsa-2024_1646)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241646 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Bug Fixes: TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786527041)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786527041 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPRO...

soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze 調査 LetsDefend ケーススタディ このリポジトリには、不審な PowerShell アクティビティ、GitHub でホストされたペイロード、EDRFreeze ツールの実行を含む LetsDefend シナリオに基づいた SOC 調査の記録が含まれています。 このリポジトリに含まれるもの 完全なレポート: report.md タイムライン: timeline.md 侵害指標: iocs.md MITRE ATT&CK マッピング: mitre.md 調査スクリーンショット: screenshots ケース概要 調査により、ホストが...

CopyFail

CVE-2026-31431を実装したCopyFailで、手抜きではありません。お好みでペイロードをご持参ください。...

ComfyUIrce

ComfyUIrce Git CVE-2025-67303 ペイロード...

GHSA-42VR-XJ54-VC7V PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

Summary PyJWKClient.getsigningkeyfromjwttoken — the first step of the JWKS verification flow documented in docs/usage.rst — must decode a token's payload before its signature can be checked, via jwt.apijwt.decodecompletetoken, options="verifysignature": False. That call parses the payload with...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 脆弱性ラボ このリポジトリは、CVE-2025-7775 の nuclei テンプレートをテストするための脆弱な環境を提供します。 実行方法 docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 脆弱性テスト 1. リモートコマンド実行 RCE curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type: application/json" \ -d...

CVE-2017-0199

エクスプロイトツールキット CVE-2017-0199 エクスプロイトツールキット CVE-2017-0199 は便利なPythonスクリプトであり、ペネトレーションテスターやセキュリティ研究者に、Microsoft Office RCEを迅速かつ効果的にテストする方法を提供します。複雑な設定なしに、悪意のあるRTF/PPSXファイルを生成し、metasploit / meterpreter / その他のペイロードを被害者に配信できます。このスクリプトはPython 3で動作するように修正されています。...

sdk

@cosignet/sdk 薄く、依存関係ゼロのTypeScriptクライアント for Cosignet — ヒューマン・イン・ザ・ループ による高リスクAIエージェントアクションの承認、およびペイロードにバインドされたパスキー署名。 危険なアクションが実行される前に人間をループに入れます：アクションを一時停止し、人物から明示的なパスキー承認（Face ID / Touch ID / Windows Hello / セキュリティキー）を取得し、正確なペイロードにバインドされた 署名済み決定があった場合のみ続行します —...