CVE-2023-36845

CVE-2023-36845 Una vulnerabilidad de modificación de variables externas de PHP en J-Web de Juniper Networks Junos OS en las series EX y SRX permite que un atacante no autenticado basado en red controle ciertas variables de entorno. Uso del Script root@kitploit: $ dos2unix CVE-2023-36845.sh $...

Crystal-Kit

Crystal Kit Este repositorio es un experimento técnico y social para explorar si reemplazar las primitivas de evasión de Cobalt Strike Sleepmask/BeaconGate con un PICO de Crystal Palace es factible o incluso deseable para escenarios avanzados de evasión. Uso 1. Deshabilite las ofuscaciones de...

CVE-2023-36845-POC

Script de Automatización de PoC para CVE-2023-36845 Este script proporciona una prueba de concepto PoC automatizada para la vulnerabilidad identificada como CVE-2023-36845, que afecta al componente J-Web de Juniper Networks Junos OS en dispositivos de las series EX y SRX. Demuestra el potencial...

CVE-2023-36845

CVE-2023-36845 Descripción CVE-2023-36845 representa una notable vulnerabilidad de manipulación de variables de entorno PHP que afecta a los firewalls Juniper SRX y switches EX. Si bien Juniper ha clasificado esta vulnerabilidad como de gravedad media, en este artículo explicaremos cómo esta únic...

CVE-2023-36845

CVE-2023-36845 Usage? bash cve.sh yourfile.txt Referensi: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 Una Prueba de Concepto para el encadenamiento de los CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 desarrollada por @watchTowr para lograr Ejecución Remota de Código en Juniper JunOS en productos de las series...

CVE-2023-36844_Juniper_RCE

CVE-2023-36844JuniperRCE Una prueba de concepto para encadenar los CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 para lograr Ejecución Remota de Código phpinfo en Juniper JunOS dentro de los productos de las series SRX y EX.Modificado a partir del exploit original desarrolla...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

CVE-2023-32784-EXPLOIT-REPORT

Demostración del Exploit CVE-2023-32784 Resumen del Proyecto Este repositorio proporciona una demostración de CVE-2023-32784, una vulnerabilidad crítica encontrada en versiones de KeePass anteriores a la 2.54. El exploit permite la recuperación de la contraseña maestra a través de volcados de...

CVE-2023-36844

CVE-2023-36844 该漏洞是Juniper JunOS中SRX和EX系列产品的远程代码执行漏洞，允许攻击者在运行JunOS软件的目标Juniper设备上执行任意代码。该漏洞可能导致受影响的设备被入侵，对其服务的网络构成严重安全风险。 Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-36844 $ cd CVE-2023-36844 $...

CVE-2023-36845-Juniper-Vulnerability

CVE-2023-36845 该脚本为 CVE-2023-36845 提供了自动化概念验证（PoC），该漏洞影响 Juniper Networks Junos OS 的 EX 和 SRX 系列设备。它利用 J-Web 组件，允许远程修改 PHPRC 变量并可能进行代码注入。 受影响版本： 受 CVE-2023–36845 影响的 Junos OS 版本： 1. 所有早于 20.4R3-S9 的版本 2. 21.1R1 及更高版本 3. 早于 21.2R3-S7 的 21.2 版本 4. 早于 21.3R3-S5 的 21.3 版本 5. 早于 21.4R3-S5 的 21.4 版本 6...

PT-2026-91890

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf node activate ex of the file scenegraph/base scenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly...

PT-2026-91878

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf url concatenate ex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capabl...

CVE-2026-73073

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

CVE-2026-74388

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Open Sound System OSS sequencer. A local attacker could exploit a Use-After-Free UAF vulnerability by concurrently closing a sequencer port while an event containing System Exclusive SysEx data is pending dispatch. This...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

ALPINE-CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

DEBIAN-CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

CVE-2026-73073

Prior to Vim 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim builds a vimgrep command from a tags file's typeref:/typename: field without sufficient escaping. A crafted tag entry can inject an unterminated collection and command separator, executing arbitrary Ex/OS commands when a use...

CVE-2026-73073 Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...