challenge_CVE-2020-13777

CVE-2020-13777 챌린지 여기 pcap에서 TLS 1.3 MITM이 가능한지 증명하고 0-RTT 초기 데이터를 복호화해 보세요 서버: 192.168.100.23:5556. 자세한 내용은 https://jovi0608.hatenablog.com/entry/2020/06/13/104905 및 CVE-2020-13777을 참조하세요...

exchange-0days-202103

exchange-0days-202103 CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 のエクスプロイトに対するIoCの特定...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE エクスプロイト 著者: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 このリポジトリには、脆弱なWordPressフォームプラグインの認証されていない任意のファイルアップロードの脆弱性を利用してリモートコード実行（RCE）に至る、CVE-2024-51791の概念実証エクスプロイトが含まれています。 スクリプトの動作...

CVE-2022-37706

CVE-2022-37706 CVE-2022-37706용 익스플로잇. 이는 Linux의 주요 창 관리자 중 하나인 Enlightenmenthttps://www.enlightenment.org/에서 발견된 0-day 취약점입니다. 모든 공로는 MaherAzzouzihttps://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit에게 있습니다. 이는 CTF를 위한 익스플로잇의 복사본입니다. https://twitter.com/maherazz2/status/1569665311707734023...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns CVE-2021-25679、CVE-2021-25680、CVE-2021-25681 のゼロデイ解説記事を公開するリポジトリです。 概要 CVE-2021-25679: Adtran Personal Phone Manager のメールアドレス変更フォームにおける認証された保存型XSS CVE-2021-25680: Adtran Personal Phone Manager における複数の反射型XSS CVE-2021-25681: AdTran Personal Phone Manager におけるDNS情...

ZDI-CAN-16857

CVE-2023-32163 ZDI-CAN-16857 0-day 익스플로잇 여기에서 제 보고서를 읽을 수 있습니다 📜 여기에서 저에게 유니콘을 사주실 수 있습니다 🦄 지식을 공유하세요!...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 CVE-2023-4863용 POC입니다. 익스플로잇이 아닙니다. @benhawkes님께 감사드립니다. 이 취약점을 트리거하기 위한 올바른 codelengths 집합을 발견해 주셨습니다! 자세한 내용은 Ben의 블로그 게시물을 참조하세요! https://blog.isosceles.com/the-webp-0day/...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - 치명적인 NGINX RCE CVSS 9.2 분류 카테고리: 0-Day / 원격 코드 실행 CVE: CVE-2026-42945 CVSS: 9.2 치명적 발견일: 2026년 5월 12일 패치일: 2026년 5월 F5 분기별 보안 릴리스 출처: GitHub DepthFirstDisclosures/Nginx-Rift 취약점 세부 정보 2008년 에 도입되어 16년 동안 존재했던 NGINX의 ngxhttprewritemodule 구성 요소의 힙 버퍼 오버플로우 입니다. 영향받는 버전 : NGINX...

ksmbd-n-day

README 이 저장소는 제 연구 기사 Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days를 함께 제공합니다. 해당 기사에서는 2023년의 n-데이CVE-2023-52440 및 CVE-2023-4130에 대한 POC를 개발합니다. 커널 .config, 커널 실행 스크립트, 이미지 빌드 스크립트 및 POC를 제공합니다. 이미지 생성 스크립트는 Syzkaller에서 가져왔습니다. impacket의 diff는 커밋...

CVE-2023-4863-

CVE-2023-4863 libfuzzer로 유명한 libweb 제로데이 취약점을 트리거하기...

Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-

Questo repository non contiene un README...

Cronos-Rootkit

Rootkit Cronos Cronos è un rootkit ring 0 per Windows 10/11 x64. Cronos è in grado di nascondere processi, proteggerli ed elevarne i privilegi tramite manipolazione dei token. Caratteristiche Nascondi processo Eleva i permessi del processo Proteggi processo Contributi I contributi sono benvenuti...

ConPresentations

ConPresentations Varie diapositive, risorse e registrazioni di alcune delle mie presentazioni a conferenze. Presentazioni a conferenze Keynote BSidesCanberra 2023: "Quando gli exploit non sono binari" Diapositive OffensiveCon 2023: "Il bug di Print Spooler che non lo era" con James Forshaw...

CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098924 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has ...

Astra Linux – Vulnerability in imagemagick

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets were causing undefined behavior, including integer overflow and out-of-range values, as reported by UndefinedBehaviorSanitizer. Such issues could negatively...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, using the magick stream command in ImageMagick, specifying multiple consecutive %d format specifiers in a filename template caused a memory leak. Versions...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick within MagickCore/statistic.c. An attacker who submits a crafted file processed by ImageMagick could induce undefined behavior, resulting in an excessively large value for the 64-bit type ssizet. This likely leads to a disruption in the application’s...

Astra Linux – Vulnerability in Firefox, Thunderbird

Failure to correctly record the location of live pointers across wasm instance calls resulted in a garbage collection occurring within the call without tracing those live pointers. This could have led to a use-after-free condition, causing a potentially exploitable crash. This vulnerability affec...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: A bug related to out-of-bounds write operations has been fixed. Ensure that the index in rtl2830pidfilter does not exceed 31 to prevent out-of-bounds access. dev-filters is a 32-bit value;...