CVE-2022-47986

CVE-2022-47986 Pourquoi Cette vulnérabilité est exploitée activement. IceFire utilise cette vulnérabilité pour déployer le ransomware sur les systèmes ciblés. Je souhaite aider les équipes SOC/Blue à identifier les systèmes impactés et les équipes Pentesters/Red à l'exploiter et à la signaler...

CVE-2021-30632

Анализ этой ошибки можно найти здесь. Это ошибка в Chrome, сообщённая анонимным исследователем, и, как полагают, она эксплуатировалась в реальных атаках. Эксплойт протестирован на версии v8 9.3.345.16 коммит 632e6e7, которая поставлялась с Chrome 93.0.4577.63, то есть до исправления ошибки, на...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Exploitation de la vulnérabilité Office Résumé de la vulnérabilité Le 8 septembre heure de Pékin, le CERT de NSFOCUS a surveillé la publication par Microsoft d'un avis de sécurité divulguant la vulnérabilité d'exécution de code à distance dans Microsoft MSHTML. Un...

CVE-2023-38831-RaRCE

RaRCE, Générateur d'exploit pour CVE-2023-38831 Il s'agit d'un générateur d'exploit facile à installer et à utiliser, polyvalent, pour CVE-2023-38831, une vulnérabilité qui affecte WinRAR versions antérieures à 6.23. RARLabs WinRAR avant la version 6.23 permet à des attaquants d'exécuter du code...

cve-2023-5217-poc

CVE-2023-5217: Эксплойт переполнения кучи при кодировании VP8 в libvpx CVE-2023-5217 — это эксплуатируемая в реальных условиях уязвимость libvpx, обнаруженная Клеманом Лесинем из Группы анализа угроз Google Threat Analysis Group, нацеленная на Chrome. Этот репозиторий показывает, как вызвать...

CVE-2026-0257

CVE-2026-0257 Уязвимость обхода аутентификации PAN-OS GlobalProtect ⚡ Простое использование Используйте этот проект только в безопасных и авторизованных средах, таких как: Локальные виртуальные машины Docker-контейнеры Изолированные лабораторные стенды Авторизованные среды тестирования на...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server и Confluence Data Center содержат критическую неаутентифицированную уязвимость удаленного выполнения кода, идентифицированную как CVE-2022-26134, согласно сообщению службы безопасности Atlassian от 2 июня 2022 года. Уязвимость не была исправлена на момент...

CVE-2025-66478

Analyse des journaux d'attaques réelles contre la vulnérabilité CVE-2025-66478 - RCE dans les Server Actions Next.js Aperçu Ce projet collecte des journaux d'attaques réelles enregistrés par une application Next.js 15.1.2 exposée sur Internet s'exécutant dans un conteneur Docker. Ces journaux...

Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329. Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control...

PT-2026-79386

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.21 Description Unauthenticated remote attackers can execute arbitrary code due to a code injection flaw. This issue occurs when the analyse resultat skel function mishandles the X-Spip-Filtre HTTP request header. Thi...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

On May 18, 2024, Kaspersky's Global Research & Analysis Team GReAT, with the help of its partners, held the qualifying stage of the SAS CTF, an international competition of cybersecurity experts held as part of the Security Analyst Summit conference. More than 800 teams from all over the world to...

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager EPM, including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows - CVE-2024-29847 CVSS score: 10.0 - A deserialization of...

Patch Tuesday - September 2024

Microsoft is addressing 79 vulnerabilities this September 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today; at time of writing, all four are listed on CISA KEV. Microsoft is also patching four critical...

Patch Tuesday - August 2024

Microsoft is addressing 88 vulnerabilities this August 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for ten of the vulnerabilities published today, which is significantly more than usual. At time of writing, all six of the known-exploited...

Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP

Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 CVSS score: 9.8, the vulnerability impacts all versions of the software before 1.3.0. It has been describ...

Patch Tuesday - May 2024

Microsoft is addressing 61 vulnerabilities this May 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for three of the vulnerabilities published today. At time of writing, two of the vulnerabilities patched today are listed on CISA KEV. Microsoft is...

The Bug Report October 2022 Edition

The Bug Report — October 2022 Edition By Trellix · November 2, 2022 This story was written by Richard Johnson. Do ROP exploits count as jmp scares? Why am I here? Welcome back to the Bug Report: Spooky Edition, and we’ve got bugs crawling out of the walls! Of all the months we do this, we’ve foun...

Microsoft Confirms 2 New Exchange Zero-Day Flaws Being Used in the Wild

Microsoft officially disclosed it investigating two zero-day security vulnerabilities impacting Exchange Server 2013, 2016, and 2019 following reports of in-the-wild exploitation. "The first vulnerability, identified as CVE-2022-41040, is a Server-Side Request Forgery SSRF vulnerability, while th...