struts-pwn

struts-pwn Эксплойт для Apache Struts CVE-2017-5638 Использование Тестирование одного URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Тестирование списка URL. python struts-pwn.py --list 'urls.txt' -c 'id' Проверка существования уязвимости для одного URL...

CVE-2026-42167-PoC

CVE-2026-42167 POC ProFTPD의 modsql SQL 인젝션을 통한 사전 인증 원격 코드 실행 작성자: Van Glenndon Enad 최초 발견: ZeroPath 게시일: 2026년 5월 1일 심각도: 치명적Critical CVSS v3.1 점수: 8.1 CVSS v3.1 벡터: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v2 점수: 7.6 CVSS v2 벡터: CVSS2AV:N/AC:H/Au:N/C:C/I:C/A:C CWE: CWE-89 SQL 인젝션, CWE-...

SharpNoPSExec

SharpNoPSExec Выполнение команд без файлов для латерального перемещения. SharpNoPSExec запросит все службы и случайным образом выберет одну с типом запуска 'отключена' или 'вручную', текущим статусом 'остановлена' и с привилегиями LocalSystem для их повторного использования. После выбора службы о...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - pullrequesttarget 주입을 통한 RCE → 공급망 손상 발견 및 보고: Astaruf 전체 분석 문서: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ 업스트림 권고: sherlock-project/sherlock GHSA advisory NVD 항목: https://nvd.nist.gov/vuln/detail/CVE-2026-44590 CV...

CVE-2021-4034

CVE-2021-4034 polkit pkexec 로컬 권한 상승 취약점으로 사용자 정의 명령 추가 https://github.com/signfind/CVE-2021-4034 로 변경 /bin/sh 대화형 셸 취소 특수한 경우의 원라이너 명령 실행에 적합 빌드 gcc cve-2021-4034.c -o cve RCE...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2026-24061

ruby CVE-2026-24061.rb -l targets.txt --cmd "id" --threads 10 ruby CVE-2026-24061.rb -t 192.168.1.10...

npm-cve-2026-26830-26833

npm CVE 인덱스, 2026년 3월 이 저장소는 2026-02-25에 MITRE가 CVE ID를 부여한 npm 패키지의 명령 주입 취약점을 다루는 4개의 공개 권고 저장소를 위한 디렉터리 페이지일 뿐입니다. 2026-03-24 기준으로 각 패키지의 최신 npm 릴리스는 여전히 영향을 받습니다: CVE| 패키지| 최신 npm 릴리스| 상태 ---|---|---|--- CVE-2026-26830| pdf-image| 2.0.0| 영향 있음, 수정 릴리스 미공개 CVE-2026-26831| textract| 2.5.0| 영향 있...

CVE-2026-84278

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-107703

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by...

CVE-2026-107704

The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file...

CVE-2026-107699

ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to childprocess.exec in ppt2png.js,...

CVE-2026-107322

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is vulnerable to a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands via attacker-controlled arguments, leading to command execution with root privil...

CVE-2026-84278 IBM Guardium Data Protection Command Injection

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

EUVD-2026-95166

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

tlsenum

tlsenum tlsenum은 서버가 지원하는 TLS 암호 스위트를 열거하고 우선순위 순서로 나열하는 명령줄 TLS 열거 도구입니다. 이 도구는 TLS ClientHello 메시지를 보내고 서버에서 오는 ServerHello 응답을 구문 분석하여 작동합니다. tlsenum은 서버가 선호하는 암호 스위트를 결정하며 클라이언트가 표시한 선호도를 무시한다고 가정합니다. 이는 TLS 사양에 의해 엄격히 보장되지는 않지만 상당히 일반적인 구현 세부 사항으로 보입니다. 설치 tlsenum은 Python 2.7, 3.3 또는 3.4에서 사...

gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...

DoHC2

⚠️ ПРИМЕЧАНИЕ: Этот инструмент больше не поддерживается активно. DoHC2 DoHC2 позволяет использовать библиотеку ExternalC2 от Райана Хэнсона https://github.com/ryhanson/ExternalC2 для управления и контроля C2 через DNS поверх HTTPS DoH. Инструмент создан для популярного программного обеспечения для...

r2s

React2Shell R2S - Инструмент тестирования CVE-2025-55182 Продвинутый инструмент тестирования эксплуатации для оценки уязвимости CVE-2025-55182 Особенности • Установка • Использование • Тестовая среда • Правовая информация 📖 Что такое R2S? R2S React2Shell — это инструмент тестирования безопасности...