CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Office漏洞复现 漏洞概述 北京时间9月8日，绿盟科技CERT监测到微软发布安全通告披露了Microsoft MSHTML 远程代码执行漏洞，攻击者可通过制作恶意的 ActiveX 控件供托管浏览器呈现引擎的 Microsoft Office文档使用，成功诱导用户打开恶意文档后，可在目标系统上以该用户权限执行任意代码。微软在通告中指出已检测到该漏洞被在野利用，请相关用户采取措施进行防护。 MSHTML（又称为Trident）是微软旗下的Internet Explorer 浏览器引擎，也用于 Office 应用程序，以在...

CVE-2021-30632

来源：https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 此漏洞的分析可在此处查看。这是一个由匿名研究人员报告的 Chrome 漏洞，据信已在野外被利用。 此处提供的漏洞利用已在 v8 版本 9.3.345.16（commit 632e6e7）上测试通过，该版本随 Chrome 93.0.4577.63 一同发布，是漏洞修复前的最后一个版本，测试环境为 Ubuntu 20.04。我尚未在 Chrome 本身上进行测试。 要进行测试，请检出 v8 的 commit...

cve-2023-5217-poc

CVE-2023-5217: Desbordamiento de Montón en Codificación VP8 de libvpx PoC CVE-2023-5217 es una vulnerabilidad de libvpx explotada in-the-wild que fue encontrada por Clément Lecigne del Grupo de Análisis de Amenazas de Google para estar atacando Chrome. Este repositorio muestra cómo desencadenar...

CVE-2023-38831-RaRCE

RaRCE，CVE-2023-38831漏洞的利用生成器 这是一个易于安装和使用、多功能的利用生成器，针对CVE-2023-38831，该漏洞影响6.23版本之前的WinRAR。 RARLabs WinRAR 6.23之前版本允许攻击者在用户尝试查看ZIP存档中的良性文件时执行任意代码。问题在于ZIP存档可能包含一个良性文件（如普通的.JPG文件）以及一个与该良性文件同名的文件夹，当仅尝试访问该良性文件时，文件夹的内容（可能包含可执行内容）会被处理。该漏洞于2023年4月至8月在野外被利用。 如何安装 使用pip 你可以通过pip轻松安装该工具。 root@kitploit: pip...

CVE-2022-47986

CVE-2022-47986 Por qué Esta vulnerabilidad se explota activamente. IceFire utiliza esta vulnerabilidad para desplegar el ransomware en sistemas objetivo. Me gustaría ayudar a los equipos de SOC/Blue a identificar los sistemas afectados y a los Pentesters/Red a explotarla y reportarla. Descripción...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect 身份验证绕过漏洞 ⚡ 简单用法 仅在安全且授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-0257 cd CVE-2026-0257 Create virtual environment python -m venv venv Active virtual environment Linux / macOS: source...

CVE-2025-66478

CVE-2025-66478 - Next.js Server Actions RCE 漏洞實際攻擊日誌分析 概述 本專案收集了一個暴露在網際網路上的 Next.js 15.1.2 應用程式（執行於 Docker 容器中）所記錄的真實攻擊日誌。這些日誌展示了 CVE-2025-66478 漏洞在野外被大量自動化攻擊工具掃描和利用的情況。 紀錄時間範圍 : 2025-12-04 2025-12-06（約 48 小時） 環境資訊 : 框架: Next.js 15.1.2 執行環境: Bun v1.2.20 容器: Docker Alpine Linux 時區: Asia/Taipei...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server 和 Confluence Data Center 存在一个严重的未认证远程代码执行漏洞，被标识为 CVE-2022-26134，根据 Atlassian 于 2022 年 6 月 2 日发布的安全公告。该漏洞在 6 月 2 日公布时尚未被修补，并已在野外被利用。截至 6 月 3 日，已有补丁和临时解决方案可用。 本仓库仅用于实验和教育目的。 依赖项 Docker Nuclei 易受攻击的 Confluence 环境 运行易受攻击的环境 root@kitploit: docker-compose up...

PT-2026-79386

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.21 Description Unauthenticated remote attackers can execute arbitrary code due to a code injection flaw. This issue occurs when the analyse resultat skel function mishandles the X-Spip-Filtre HTTP request header. Thi...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

On May 18, 2024, Kaspersky's Global Research & Analysis Team GReAT, with the help of its partners, held the qualifying stage of the SAS CTF, an international competition of cybersecurity experts held as part of the Security Analyst Summit conference. More than 800 teams from all over the world to...

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager EPM, including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows - CVE-2024-29847 CVSS score: 10.0 - A deserialization of...

Patch Tuesday - September 2024

Microsoft is addressing 79 vulnerabilities this September 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today; at time of writing, all four are listed on CISA KEV. Microsoft is also patching four critical...

Patch Tuesday - August 2024

Microsoft is addressing 88 vulnerabilities this August 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for ten of the vulnerabilities published today, which is significantly more than usual. At time of writing, all six of the known-exploited...

Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP

Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 CVSS score: 9.8, the vulnerability impacts all versions of the software before 1.3.0. It has been describ...

Patch Tuesday - May 2024

Microsoft is addressing 61 vulnerabilities this May 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for three of the vulnerabilities published today. At time of writing, two of the vulnerabilities patched today are listed on CISA KEV. Microsoft is...

The Bug Report October 2022 Edition

The Bug Report — October 2022 Edition By Trellix · November 2, 2022 This story was written by Richard Johnson. Do ROP exploits count as jmp scares? Why am I here? Welcome back to the Bug Report: Spooky Edition, and we’ve got bugs crawling out of the walls! Of all the months we do this, we’ve foun...

Microsoft Confirms 2 New Exchange Zero-Day Flaws Being Used in the Wild

Microsoft officially disclosed it investigating two zero-day security vulnerabilities impacting Exchange Server 2013, 2016, and 2019 following reports of in-the-wild exploitation. "The first vulnerability, identified as CVE-2022-41040, is a Server-Side Request Forgery SSRF vulnerability, while th...

CVE-2022-2294

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: gwillcox-r7 at July 05, 2022 3:18am UTC reported: Looks like this was a heap buffer overflow in WebRTC which could...