Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

CVE-2019-0708Poc-BatchScanning

title:CVE-2019-0708 Detección Masiva Esta detección masiva se basa en la herramienta de detección no invasiva publicada por 360 0708detector.exe, con las siguientes funciones: 1. Detección individual 2. Detección masiva ¡Haga doble clic en 0708detector-全自动批量版.exe para usarlo! La detección masiva...

AIX360

AI Explainability 360 v0.3.0 ✨ NUEVO: IBM Research tiene un nuevo kit de herramientas In-Context Explainability 360 ICX360 que extiende la explicabilidad a los LLM , específicamente en cuanto a la entrada proporcionada al LLM. ¡Échale un vistazo! 🚀✨ El kit de herramientas AI Explainability 360 es...

360WFP_Exploit

360WFPExploit 一个概念验证（PoC），演示对 360 安全卫士 WFP 驱动（360netmonx64wfp.sys） 接口的潜在滥用，旨在验证缺少调用者身份验证的 IOCTL 接口可能被第三方程序滥用的风险。 本项目仅用于安全研究和漏洞分析，禁止用于任何非法用途。 项目概述 在对 360 安全卫士网络监控驱动 360netmonx64wfp.sys 进行逆向分析时，发现以下行为： 该驱动向用户态暴露了两个设备对象： \.\360TdiFilter \.\360TdiSpeed 任何拥有管理员权限的进程均可通过 DeviceIoControl 访问这些设备对象...

CVE-2017-15428

CVE-2017-15428 信息 这是一个针对V8漏洞CVE-2017-15428的利用程序，该漏洞由奇虎360 Vulcan团队的赵奇勋（@S0rryMybad）于2017年发现。本人并未参与此漏洞的发现。本利用程序是为我在大学本科的毕业论文而编写的。 致谢 感谢Samuel Groß为本利用程序提供的依赖项。 感谢Richard Zhu和Amat Cama在CVE-2019-13698上的工作。...

CVE-2019-0708-Check

360 RDP漏洞无损扫描器：https://cert.360.cn/warning/detail?id=1caed77a5620fc7da993fea91c237ed5 github项目：https://github.com/hualy13/CVE-2019-0708-Check...

bypass360mimikatz_x64

方法：改资源、加数字签名 解压密码：6613kris清水川崎...

Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

透过管道看 XNU：CVE-2018-4242 分析报告 奇虎 360 Nirvan 团队的 Zhuo Liang 目录 1 引言 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . 1 2 XNU 内核 2 2.1 系统调用 . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 2.2.1 machmsg 与 Mach 端口...

DsArk64

DsArk64 DsArk64.sys se distribuye con 360 Total Security. Firmado por WHQL de Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Solicitado MITRE. Primitivas Terminación de procesos ring 0 IOCTL 0x80863008, entrada: PID en bruto de 4 bytes El driver llama a ZwOpenProcessALLACCESS +...

CVE-2026-38766

CVE-2026-38766 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个问题，允许本地攻击者通过内核模式驱动程序提升权限。...

CVE-2026-38763

CVE-2026-38763 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个问题，允许本地攻击者在内核中引发拒绝服务。...

CVE-2026-38765

CVE-2026-38765 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

CVE-2026-38764 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个漏洞，允许本地攻击者通过内核驱动程序 pgsecdl.sys 提升权限。...

CVE-2026-21822

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

EUVD-2026-82851

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

CVE-2026-21822

HCL AppScan 360° is affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modif...

CVE-2026-21822: Improper Limitation of a Pathname to a Restricted Directory

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

Autodesk Fusion 360 <= 2704.1.53 MITM (adsk-sa-2026-0016)

The version of Autodesk Fusion 360 installed on the remote host is less than or equal to 2704.1.53. It is, therefore, affected by a man-in-the-middle vulnerability: - A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings...