android-c-sharp-rat-server

Android C R.A.T Server 이것은 C R.A.T Server의 플러그인 시스템을 위해 구축된 플러그인입니다. 1. 이 플러그인을 설치하려면 AndroidExtension/bin/Debug에 있는 AndroidExtension.dll 파일을 /TutServer/bin/Debug/scripts에 복사하십시오. 2. 그런 다음 서버를 시작하고 Plugins 탭을 선택하십시오. 3. 목록에서 AndroidExtension.dll을 선택하고 Execute를 클릭하십시오. 4. 서버 포트클라이언트에 사용하는 것과 동일한 포...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

PyShell

PyShell PyShell 은 멀티플랫폼 Python 웹쉘입니다. 이 도구는 웹 서버에서 원격으로 접근할 수 있는 쉘과 같은 인터페이스를 얻는 데 도움을 줍니다. 다른 웹쉘과 달리, 이 도구의 주요 목표는 서버 측에서 사용되는 언어나 운영 체제에 관계없이 가능한 한 적은 코드를 사용하는 것입니다. 덕분에 Windows와 Linux 모두에서 다양한 유형의 쉘aspx, php, jsp, sh, py...을 명령 기록, 파일 업로드 및 다운로드, 심지어 표준 쉘처럼 디렉토리를 이동하는 기능과 함께 사용할 수 있습니다. 요구 사항...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

BetterAndroRAT

향상된 안드로이드 RAT Dendroid 기반 안드로이드 원격 접속 트로이 목마 모든 책임은 사용자 본인에게 있습니다. 연구 목적으로만 사용하십시오. 기능 원격 업데이트 및 애플리케이션 설치 원격 웹캠 원격 마이크 녹음 원격 파일 관리 원격 통화 및 SMS 원격 장치 제어...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3은 파일 관리 모듈에서 ​​무제한 파일 업로드 취약점​​이 존재합니다. 이로 인해 인증된 공격자최소 권한을 가진가 악성 PHP 스크립트를 포함한 임의의 파일을 웹 서버에 업로드할 수 있습니다. 파일 확장자 검증 부족 및 적절한 정화sanitization 부족으로 인해, 공격자는 조작된 페이로드예: 웹 셸를 업로드하고 웹 루트를 통해 접근하여 대상 시스템에서 임의의 코드를 실행할 수 있습니다...

CVE-2024-24137

CVE-2024-24137: 학생 파일 관리 시스템 SQL 인젝션 개념 증명PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md 개념 증명PoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - 未認証のディレクトリ列挙 CVE ID CVE-2026-29909 説明 MRCMS V3.1.2には、ファイル管理モジュールに未認証のディレクトリ列挙の脆弱性が存在します。/admin/file/list.doエンドポイントには認証制御と適切な入力検証が欠如しており、リモートの攻撃者が認証情報なしでサーバー上のディレクトリ内容を列挙することが可能です。 概念実証（PoC） GET /admin/file/list.do?path=../../../src/main/resources/ HTTP/1.1 Host:...

oracleShell

oracleShell oracle 데이터베이스 명령 실행 테스트 환경-DBA 권한: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version 11.2.0.1.0 -...

PT-2026-98145

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description An authenticated user with file-management access can upload malicious XML and XSLT Extensible Stylesheet Language Transformations attachments. The API endpoint 'GET /api/v1/object type/id/files/fil...

CVE-2026-76431

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

CVE-2026-76431 Cisco Identity Services Engine Arbitrary File Deletion Vulnerability

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

EUVD-2026-81016

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

CVE-2026-76431

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative credentials to delete arbitrary files and directories on the underlying operating system. The root cause is improper va...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

SUSE CVE-2026-55499

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner's parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

ROS-20260901-73-0030

The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the SSHFS file remote management program lies in the improper definition of symbolic links before accessing the file. This allows a malicious actor to trigger a service failure.

The vulnerability of the SSHFS file system for remote file management is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-16617: Improper Neutralization of Input During Web Page Generation

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...