Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

StealthRL

StealthRL: 複数のAIテキスト検出器を回避する強化学習パラフレーズ攻撃 論文（arXiv） デモ モデル（Hugging Face） ベンチマークデータセット（Hugging Face 要約...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 고급 익스플로잇 도구 전문 React 서버 컴포넌트 DoS 익스플로잇 프레임워크 "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 빠른 시작 • 📖 문서화 • 💻 기능 • ⚠️ 법적 면책 조항 🎯 CVE-2025-55184 소개 CVE-2025-55184 는 React 서버 컴포넌트RSC 구현에 영향을 미치는 고심각도 서비스 거부DoS 취약점 입니다. 이 취약점은 특수하게 조작된 순환 참조 페이로드를 통해 원격 공격자가 완전한 서비스 중단을 유발할 수 있습니다. 📊...

ad-autopwn

AD AutoPwn ゼロ認証からドメイン管理者へ — 自動化されたActive Directory攻撃チェーン 完全自動化されたペネトレーションテストツール。25以上の攻撃テクニックを連鎖させ、Active Directory環境を侵害します。許可されたセキュリティ評価用に設計されています。 root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' \ // \/ // \,|\/| //|||| ⚡ Zero-Auth to Domain Admin — Attack Chain Discover |...

stratus-red-team

Stratus Red Team Stratus Red Team 是云端的“Atomic Red Team™”，提供细粒度、自包含的进攻性攻击技术仿真。 公告博客文章： https://www.datadoghq.com/blog/cyber-attack-simulation-with-stratus-red-team/ https://blog.christophetd.fr/introducing-stratus-red-team-an-adversary-emulation-tool-for-the-cloud/ 快速入门 Stratus Red Team 是一个自包含的 Go...

cameradar

Cameradar RTSP 스트림 접근 도구 Cameradar는 승인된 대상의 RTSP 엔드포인트를 스캔하고, 사전 공격을 사용하여 자격 증명과 경로를 무차별 대입합니다. Cameradar의 기능 접근 가능한 대상에서 열린 RTSP 호스트를 탐지합니다. RTSP 스트림을 제공하는 장치 모델을 탐지합니다. 사전 기반의 스트림 경로 발견을 시도합니다 예: /live.sdp. 사전 기반의 카메라 자격 증명 발견을 시도합니다. 발견 결과 보고서를 생성합니다. 목차 Docker로 빠른 시작 바이너리 설치 AndroidTermux에 설치...

Log4j-JNDIServer

Log4j-JNDIServer このプロジェクトは、Log4jの脆弱性CVE-2021-44228およびCVE-2021-45046をテストするのに役立ちます。 インストールとビルド IntelliJ IDEAでプロジェクトを読み込む 「プロジェクト設定」でJDKを選択 Ctrl + Alt + Shift + S 「プロジェクト設定」でアーティファクトを作成 - 「アーティファクト」 - 「モジュールからJARを作成」 - 「ライブラリからのJARファイル」で「ターゲットJARに抽出」を選択 - 「OK」 プロジェクトをビルド Ctrl +...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

awesome-shodan-queries

Awesome Shodan Search Queries 시간이 지나면서 저는 Shodan, 말 그대로 인터넷의 어두운 면을 드러내는 인터넷 검색 엔진에 입력할 흥미롭고, 재미있으며, 우울한 검색어들을 모아왔습니다. 어떤 것들은 얼굴을 감싸 쥐게 만드는 결과를 보여주고, 다른 것들은 실제로 발견된 심각하고/또는 오래된 취약점들을 보여줍니다. 대부분의 검색 필터는 Shodan 계정이 필요합니다. 가능한 경우, 이 쿼리들은 보안되지 않은/공개된 인스턴스만 반환한다고 가정할 수 있습니다. 법적 문제를 피하기 위해, 그렇지 않은 경우...