GwisinMsi

GwisinMsi 이 저장소는 블로그 게시물에서 사용된 MSI 페이로드의 PoC를 포함하고 있습니다. 이 페이로드는 AhnLab ASEC 팀의 블로그 게시물에서 분석한 Gwisin 랜섬웨어의 MSI 페이로드를 기반으로 합니다. DLL 컴파일 구성 프로젝트 프로젝트 속성 C/C++ 전처리기 전처리기 정의 - CRTSECURENOWARNINGS 프로젝트 프로젝트 속성 문자 집합 멀티바이트 크레딧 및 참고 자료 HuskyHacks - MSI 페이로드 블로그 게시물 ASEC AhnLab - 블로그 게시물 SK Shieldus...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP Management중앙 엔드포인트 보안 관리 - 부울 기반 SQL 인젝션으로 RCE로 이어짐 Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software Link:https://www.ahnlab.com/ko/product/epp-management Product...

CVE-2025-60357

CVE-2025-60357 - NoSQLMongoDB 인젝션 취약점 및 제품 설명 AhnLab EPP Management는 패치 관리, 고급 악성코드 탐지, EDR 및 XDR 기능을 통합한 글로벌 인정을 받은 차세대 고급 엔드포인트 보호 플랫폼입니다. AhnLab EPP Management v1.0.14.32-6249의 엔드포인트 /api/console/ems/eventlog/agentEvent/list에서 NoSQLMongoDB 인젝션 이 발견되어 민감한 정보 및 개인식별정보PII가 노출되었습니다. AhnLab은 2024년 ...

EUVD-2025-210479

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

PT-2026-60765

Name of the Vulnerable Software and Affected Versions AhnLab EPP Management version 1.0.14.32-6249 Description A NoSQL injection issue exists in the 'eventlog/agentEvent/list' endpoint. NoSQL injection is a type of attack where malicious queries are injected into a NoSQL database, potentially...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management (Centralised Endpoint Security Management) versions 1.0.14.32-6249 and earlier are vulnerable to a NoSQL injection (MongoDB) in the /api/console/ems/eventlog/agentEvent/list endpoint. The flaw allows attackers to craft malicious queries in the request body to extract sensiti...

Exploit for CVE-2025-60357

CVE-2025-60357- NoSQLMongoDB Injection Vulnerab...

WordPress Country Blocker for AdSense plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Country Blocker for AdSense versions = 1.0...

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

WordPress Anber Elementor Addon plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Banner button link vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Anber Elementor Addon versions = 1.0.1...

WordPress Peer Publish plugin <= 1.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Peer Publish versions = 1.0...

Exploit for CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP Management...

WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

CVE-2023-49440

AhnLab EPP Management (Centralised Endpoint Security Management) version 1.0.15 and prior is vulnerable to Boolean-based and time-based SQL Injection within the web admin interface. The flaw resides in the improper manipulation of the preview parameter (and the list parameter) within the JSON str...