CVE-2024-41570-Havoc-C2-RCE

Havoc-C2-RCE CVE-2024-41570 This is a Chained RCE CVE-2024-41570 in the Havoc C2 framework. Command injection: Havoc is vulnerable to command injection enabling an authenticated user to execute commands on the Teamserver. Affects versions 0.3 up to the latest release 0.6. Havoc's default profile...

SharpProxyLogon

SharpProxyLogon 用于ProxyLogon链式RCE的C POC / \ | / \ / / \ | ' \ / | '| ' \ / // '/ \ / / | | |/ / / \ / |/ | ' \ \ \ | | | | | | | | / /| | | 用法 x64注入: SharpProxyLogon.exe Shellcode注入使用内置的TikiTorch存根（@Rastamouse），它将生成、挂起并将stagedbeacon.bin注入到svchost.exe中。 SharpProxyLogon.exe 192.168.58.111:443...

MyBB 1.8.25 - Chained Remote Command Execution Exploit

Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL email protected Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...