CVE-2017-7089

CVE-2017-7089 影响 ：处理恶意制作的网页内容可能导致通用跨站点脚本攻击 描述 ：在处理父标签时存在逻辑问题。通过改进状态管理解决了此问题。 Safari 10 本地同源策略绕过 root@kitploit: function Pewvar doc=open'parent-tab://apple.com';doc.document.body.innerHTML='';Click me! 由Frans Rosén提供的利用代码 root@kitploit: data:text/html,function...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modificado según el POC proporcionado por danigargu, se implementó la reproducción de escalada de privilegios en Windows 10 y se desarrolló AggressorScripts basado en el proyecto de DLL de reflexión de stephenfewer y la interfaz proporcionada por la documentación de CobaltStrike...

cve-2023-36802

CVE-2023-36802 的 PoC 针对 MSKSSRV.SYS 驱动程序的漏洞利用。完整的漏洞利用代码在易受攻击的 Windows 11 & 10 系统上有效。 注意 如果你有任何能让这个漏洞利用更出色的酷炫技巧和建议，我欢迎任何建议 : 致谢 来自 IBM X Force 的 Valentina Palmiotti @chompie1337 Google 的 Project Zero 分析...

CVE-2020-1034

CVE-2020-1034 PoC 演示了利用 cve-2020-1034 进行权限提升。 已在未修补的 Windows 10 2004 版本 build 19041.488 上测试。 该漏洞由 Microsoft 发现，并于补丁星期二（8/9/2020）修复： https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034 Writeup 第 1...

Moderate: Red Hat Security Advisory: dbus-broker security update

An update for dbus-broker is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2019-2215

CVE-2019-2215 Bad Binder PoC para CVE-2019-2215 en Android 10 x8664 AVD. Basado en elbiazo/CVE-2019-2215, núcleo según cloudfuzz workshop. Solo para investigación en entornos aislados emulador. Compilación: BUILD.md root@kitploit: source ./setup-env.sh ./scripts/start-emulator.sh...

thm-cybersec-portfolio

TryHackMe 笔记 — 网络安全作品集 个人笔记和已完成的 TryHackMe 房间总结。 作为 IT 安全角色学习参考和作品集使用。 已完成的房间 | 房间| 主题 ---|---|--- 01| Linux 权限提升| Linux 提权技术 02| Sudo 缓冲区溢出| CVE-2019-18634 03| OWASP Top 10 2025：IAAA 失败| 访问控制失效、认证失败、日志记录 04| OWASP Top 10 2025：应用程序设计缺陷| 配置错误、供应链、加密、不安全设计 05| OWASP Top 10 2025：不安全的数据处理| 加密失败、注入、反序...

RHEL 10 : freerdp (RHSA-2026:61378)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61378 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 10 : nodejs24 (RHSA-2026:61377)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61377 advisory. Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an...

RHEL 10 : iscsi-initiator-utils (RHSA-2026:61679)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61679 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utilit...

RHEL 10 : pam (RHSA-2026:61229)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61229 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

RHEL 10 : sqlite (RHSA-2026:61697)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61697 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a...

RHEL 10 : dbus-broker (RHSA-2026:61340)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61340 advisory. dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability,...

RHEL 10 : rhc (RHSA-2026:61313)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61313 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

RHEL 10 : iperf3 (RHSA-2026:61680)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61680 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter,...

RHEL 10 : gzip (RHSA-2026:61625)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61625 advisory. The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files...

RHEL 10 : nodejs22 (RHSA-2026:61376)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61376 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

RHEL 10 : nodejs-nodemon (RHSA-2026:61374)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61374 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

RHEL 10 : kernel (RHSA-2026:61351)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61351 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: SCO: fix race...