UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 后门命令执行 UnrealIRCd 3.2.8.1 后门命令执行漏洞，Python 3 利用脚本（CVE-2010-2075）。 描述 UnrealIRCd 3.2.8.1 版本包含一个特洛伊木马，允许远程攻击者执行任意命令（CVE-2010-2075）。 我参考了 Metasploit 的载荷 payload/cmd/unix/reverseperl 来编写此脚本。 用法 在监听主机上启动 Netcat 监听器： root@kitploit: nc -lp 4444 执行脚本，提供以下位置参数： root@kitploit: python3...

unrealircd-backdoor-pentest-report

🛡️ UnrealIRCd 后门渗透测试 一个专注于在隔离培训环境中识别、利用和修复 UnrealIRCd 3.2.8.1 后门（CVE-2010-2075） 的受控渗透测试项目。 免责声明： 本项目严格针对故意设置漏洞的实验室环境开展，仅用于教育和已获授权范围内的安全测试。未对任何未授权系统发起攻击。 📌 项目概述 本项目演示了针对存在漏洞的 UnrealIRCd 3.2.8.1 服务的完整漏洞评估与利用工作流程。 本次评估涵盖： 服务发现与枚举 识别存在漏洞的 UnrealIRCd 服务 验证暴露的 IRC 服务 使用 Metasploit 进行受控利用 证据收集 安全修复与加固...

sunset-noontide-pentesting

Sunset: Noontide — 渗透测试 对 Sunset: Noontide 的专业渗透测试评估与 CTF 演练，这是一台来自 VulnHub 的故意存在漏洞的机器。 本项目记录了完整的渗透测试生命周期，包括侦察、服务枚举、漏洞研究、漏洞利用、初始访问、后渗透、权限提升、入侵证明、风险评估、MITRE ATT&CK 映射以及修复建议。 ⚠️ 免责声明： 本次评估是在授权的实验室环境中针对一台故意存在漏洞的机器进行的。本文档中记录的技术和命令仅适用于已获得明确授权的系统。 🎯 目标 识别目标主机 枚举暴露的服务 识别存在漏洞的软件及版本 研究适用的漏洞 利用存在漏洞的服务 获取初始...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-后门命令执行 用于利用 CVE-2010-2075 漏洞在 UnrealIRCd 服务中建立后门的脚本 用法 用法：IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

Metasploitable2：侦察与 UnrealIRCd 后门利用 免责声明 Metasploitable2 是一台故意设计为存在漏洞的虚拟机，专门为安全培训和练习而发布。本项目完全在我拥有并控制的隔离虚拟实验环境中进行，仅用于教育目的。 概述 本项目记录了对 Metasploitable2 的完整攻击链：在网络中发现主机、对其服务进行指纹识别、识别 UnrealIRCd 中的已知后门，并利用该后门获取 shell 访问权限。 目标 练习并记录标准的从侦察到利用的工作流程：找到目标、枚举其服务、识别可利用的漏洞、利用该漏洞，并确认所获得的访问权限级别。 实验环境...

CVE-2026-2075

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...

CVE-2026-2075

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...

Exploit for Improper Input Validation in Unrealircd

UnrealIRCD 3.2.8.1 Backdoor Exploit A clean, flexible exploit...

CVE-2019-2075

In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115908308...

EUVD-2021-2075

Malware in sbrugna...

CVE-2009-2075

Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors...

CVE-2025-2075

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10390 2025-04-04 07:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590519821899 2025-04-04 07:48:28+00:00| seen|...

CVE-2025-2075 Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...

CVE-2024-2075

creationtimestamp| type| source ---|---|--- 2024-03-01 19:31:32+00:00| seen| https://t.me/ctinow/197930 2024-03-01 19:31:37+00:00| seen| https://t.me/ctinow/197935...

CVE-2024-2075

CVE-2024-2075 affects SourceCodester Daily Habit Tracker 1.0. The vulnerability resides in /endpoint/update-tracker.php where manipulation of the day parameter triggers cross-site scripting. Exploitation is possible remotely, and public disclosures exist. The impact is a potential injection of sc...

CVE-2024-2075 SourceCodester Daily Habit Tracker update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/update-tracker.php. The manipulation of the argument day leads to cross site scripting. The attack can be...

CVE-2023-5879

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 and below on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication...

PT-2024-14837

Name of the Vulnerable Software and Affected Versions The Genie Company Aladdin Connect Mobile Application versions 5.65 Build 2075 and below Description The issue concerns the storage of users' product account authentication data in clear text within the application. This allows an attacker with...

Oracle Linux 7 : binutils (ELSA-2019-2075)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2075 advisory. 2.27-41.base.0.1 - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc...

Amazon Linux 2 : poppler (ALAS-2023-2075)

The version of poppler installed on the remote host is prior to 0.26.5-43. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2075 advisory. A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service DoS via a...