RedTeamScripts

RedTeamScripts 包含各种红队脚本的仓库。 kill.exe 在红队行动期间执行各种活动时，你可能会运行多个进程，而这些进程你并不想手动关闭。kill.exe 就是为你准备的。将其复制到 C:\Windows\ 目录下，然后直接调用它并传入你想要终止的进程名称即可。 root@kitploit: kill mspaint killing mspaint 16524 killing mspaint 5284 killing mspaint 8568 killing mspaint 32244 killing mspaint 18908 killing mspaint 12600...

EUVD-2026-78592

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document-saving authorization checks. The user can grant script righ...

CVE-2026-53966

In XWiki Platform (a generic wiki platform), the Live Data edit REST API fails to perform normal document-saving authorization checks when a user modifies page rights. Any user with edit permission can escalate to script right, enabling execution of potentially dangerous Velocity scripts or deliv...

CVE-2026-53966 XWiki Platform: Privilege escalation from edit to script right through Live Data editing

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document-saving authorization checks. The user can grant script righ...

CVE-2024-7344

🐞 CVE-2024-7344: 不適切なPEイメージ読み込み このリポジトリには、UEFIシステムに影響を与えるSecure Boot回避の脆弱性であるCVE-2024-7344に関連する研究資料が含まれています。この脆弱性の技術的分析、攻撃フローのドキュメント、および管理された環境で脆弱な動作を再現するために作成された再現アプリケーションを一元管理しています。また、セキュリティ研究者がこの脆弱性に関連する技術を理解、研究、実験するのに役立つドキュメントと研究リソースも含まれています。 📑 目次 最初の発見と公式リファレンス 脆弱なバイナリ（実世界／教育用） 脆弱性の概要（分析と悪用）...

CVE-2026-49446 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

CVE-2026-39492

CVE-2026-39492 — WP Maps ブラインドSQLインジェクションスキャナ バックティックバイパスによる事前認証時間ベースブラインドSQLi → DB抽出 概要 CVE-2026-39492 は、WP Maps プラグイン（wp-google-map-plugin）バージョン 4.9.1以下 における、CVSS 9.3の重大な未認証ブラインドSQLインジェクション脆弱性です。 wpgmpajaxcall AJAXハンドラは、未認証アクセス用に wpajaxnopriv 経由で登録されています。locationid パラメータは...

CVE-2026-57850

Summary RustDesk sessions are authorized for a specific connection type — Remote full desktop control, FileTransfer, PortForward, ViewCamera, or Terminal. Before 1.4.9, the server's post-authorization message gate only checked one boolean, self.authorized, and never re-checked it against the...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua Authentication Bypass PoCエクスプロイトシミュレーション CVE-2021-33044 概要 Dahua IPカメラは、セキュリティ監視システムで広く使用されているIoTデバイスです。社内ネットワークやインターネット経由で頻繁に展開されるため、IPカメラのセキュリティ脆弱性はプライバシーと情報セキュリティに深刻な影響を与える可能性があります。...

CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF bypass via cross-origin form POST Sec-Fetch-Mode: no-cors Severity : Medium CVSS 5.4 CWE : CWE-352 — Cross-Site Request Forgery XSRF Affected : jupyterhub 4.1.0 ≤ version 5.4.5 patched in 5.4.5 Advisory : GHSA-m68r-v472-jgq9 NVD :...

CVE-2026-85595

An authentication bypass vulnerability was discovered in Traefik's digestAuth middleware. When an incoming request contains a username that does not exist in the configured authentication store, the application fails to reject the request and instead evaluates the credential against an empty stri...

CVE-2026-92079

Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92075

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92074

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92041

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92038

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92039

Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

DEBIAN-CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...