CVE-2025-55184

React2Shell PoC 此仓库提供了一个故意存在漏洞的最小环境，用于测试安全扫描器针对影响 React Server Components 和 Next.js 的最新关键 RCE 漏洞（React2Shell）。 CVE-2025-55182 ：React Server Components 版本 19.0.0、19.1.0、19.1.1 和 19.2.0（包括以下包：react-server-dom-parcel、react-server-dom-turbopack 和...

bluekeep

CVE-2019-0708 又名 Bluekeep 扫描器 一个简单的扫描器，用于判断系统是否受 CVE-2019-0708 影响。 这是由 JaGoTu 和 zerosum0x0 编写的原始 Metasploit 模块扫描器的 Python 移植版本，可在 Github 此处获取。 概念验证 通过利用 Bluekeep 漏洞实现 RCE 的概念验证。 相关 0xeb-bp Github: bluekeep。由 zerosum0x0 指出，包含在 XP 上对 MST120 进行堆喷的代码。 资源 大众媒体报道 首次 Bluekeep 大规模黑客攻击已出现——但无需恐慌 研究...

CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

Node.js-CVE-2017-5941

NodeJS 不安全反序列化漏洞演示 Node.js 是一个开源运行时环境，用于在 JavaScript 中实现服务器功能。 Node.js 中的一个特定软件包包含一个处理反序列化的易受攻击函数，如果客户端提供特制的 cookie，该函数会导致执行未授权命令。 该漏洞已被复现，并可能发起反向 shell，这是由于从客户端请求的 cookie 中读取的未净化输入数据所致。客户端可以编辑其 cookie，注入包含 bash 命令的不安全载荷，并将其发送到服务器，服务器将盲目执行该命令。这可能导致未经授权的用户访问数据库或整个机器。...

cve-2019-19781

CVE-2019-19781 该内容仅因其他研究人员率先公开其代码而上传。我们原本希望将其保密更长时间，让防御者有足够时间修补系统。 我们完全支持负责任的披露，但在此案例中，秘密已经泄露。 漏洞利用：CVE-2019-19781 Citrixmash CVE-2019-19781 利用工具 root@stronghold-nix:/home/relik/Desktop/git/cve-2019-19781 python citrixmash.py Citrixmash v0.1 - 利用 Citrix 目录遍历漏洞：CVE-2019-19781 工具编写者：Rob Simon 与 Dav...

nmap_draytek_rce

nmapdraytekrce 用于检测 Draytek 设备上 CVE-2020-8515 的 nmap 脚本...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Log4shell

이글루코퍼레이션 원치현 Log4shell 분석보고서 Log4shell CVE-2021-44228 Log4j 아파치 재단의 무료오픈소스 java기반의 모든 애플가능 다양한 자바 기반 서비스 로그 기록 JDNI데이터및 객체를 발견 참고하기위한 자바 LDAP1389 Lookup JNDI를 통해 찾은 자원을 사용하는 기능 취약서버 구동 도커이미지파일 다운로드 Asudo git clone sudo docker build . -t vulnerable-app 새로 생성할 이미지를 vulnerable-app으로 현재 디렉토리에 도커 이미지...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

ds3-nrssr-rce

Actualización: Dark Souls III 1.15.1 Se ha lanzado una nueva actualización del juego, la 1.15.1, para Dark Souls III el 25/08/2022, junto con la restauración de los servicios en línea. Esta actualización corrigió tanto CVE-2022-24125 como CVE-2022-24126 , junto con una amplia variedad de otras...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 针对境外 IP 访问内部服务器时，PHP-CGI CVE-2024-4577 Argument Injection 事件检测中，注册为 php 语言的 CGI 模式下发生的远程代码执行漏洞。当 Windows 环境中 php 以 CGI 模式运行时，即使在不支持 Unicode 字符的系统上，也会通过 Best-fit 功能将字符映射为最相似的字符进行转换，这种错误的编码转换导致了该事件的发生。 - Raw Data root@kitploit: POST /php-cgi/php-cgi%ADd +...

Computer-Security-Equifax-2017

Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies sanitization, monitoring, crypto best practices. Red team vs blue team demo of OS security flaws: exploit, persistence backdoor, and...

CVE-2019-19781

本文是关于CVE-2019-19781中登记的Citrix ADC和Gateway目录遍历远程代码执行RCE的文章。 该远程代码执行漏洞是由于在/vpn路径下的../vpns中对smb.conf文件的验证不充分而导致的。 窃取系统配置信息或服务器信息 1. Citrix 1989年成立的美国跨国软件公司 提供服务器、应用程序和桌面虚拟化、网络、SaaS、云计算技术 在存在漏洞的Citrix产品系列中，由于缺乏输入值验证而导致的目录遍历漏洞 - 由于直接使用请求路径而无需验证输入而导致的漏洞...