fakelogonscreen

FakeLogonScreen FakeLogonScreen은 Windows 로그온 화면을 위장하여 사용자의 암호를 획득하는 유틸리티입니다. 입력된 암호는 Active Directory 또는 로컬 머신에 대해 검증되어 올바른지 확인된 후 콘솔에 출력되거나 디스크에 저장됩니다. 단순히 .exe 파일을 실행하거나, 예를 들어 Cobalt Strike의 execute-assembly 명령을 사용하여 실행할 수 있습니다. 바이너리는 Releases 페이지에서 다운로드할 수 있습니다. FakeLogonScreen.exe: 콘솔에 출력을...

CVE-2026-64638

🛡️ CVE-2026-64638 - XSS2Shell WordPress 사전 인증 반사형 XSS PHP 코드 실행으로의 잠재적 확장 가능 📌 개요 CVE-2026-64638 은 WordPress 로그인 화면에 영향을 미치는 높은 심각도의 사전 인증 반사형 XSS교차 사이트 스크립팅 취약점입니다. 특정 조건에서 이 결함은 서버에서 원격 코드 실행RCE으로 이어질 수 있으며, 연구원들은 이 체인을 XSS2Shell 이라고 부릅니다. 속성| 세부 정보 ---|--- CVE ID| CVE-2026-64638 심각도| 높음 CVSS 8....

CVE-2026-64638

CVE-2026-64638 // XSS2Shell CVE-2026-64638XSS2Shell 벡터에 대한 기술 분석 및 방어적 완화 매트릭스입니다. WordPress Core 인증 화면의 파싱에서 발생하는 심각한 비일관성으로, 사전 인증pre-authentication 상태의 반사형 XSSCross-Site Scripting를 브라우저 프리미티브와 연결하여 원격 코드 실행RCE에 도달할 수 있게 합니다. 🛠️ 핵심 요약 벡터 ID: CVE-2026-64638 코드명: XSS2Shell 심각도: 높음 CVSS 4.0: 8.9 CW...

WordPress XSS2Shell 4.7.0 < 4.7.34 / 4.8.0 < 4.8.29 / 4.9.0 < 4.9.30 / 5.0.0 < 5.0.26 / 5.1.0 < 5.1.23 / 5.2.0 < 5.2.25 / 5.3.0 < 5.3.22 / 5.4.0 < 5.4.20 / 5.5.0 < 5.5.19 / 5.6.0 < 5.6.18 / 5.7.0 < 5.7.16 / 5.8.0 < 5.8.14 / 5.9.0 < 5.9.14 / 6.0.0 < 6.0.13 / 6.1.0 < 6.1.11 / 6.2.0 < 6.2.10 / 6.3.0 < 6.3.9 / 6.4.0 < 6.4.9 / 6.5.0 < 6.5.9 / 6.6.0 < 6.6.6 / 6.7.0 < 6.7.6 / 6.8.0 < 6.8.7 / 6.9.0 < 6.9.6 / 7.0.0 < 7.0.3 Login Screen XSS

The version of WordPress installed on the remote host is 4.7.x prior to 4.7.34, or 4.8.x prior to 4.8.29, or 4.9.x prior to 4.9.30, or 5.0.x prior to 5.0.26, or 5.1.x prior to 5.1.23, or 5.2.x prior to 5.2.25, or 5.3.x prior to 5.3.22, or 5.4.x prior to 5.4.20, or 5.5.x prior to 5.5.19, or 5.6.x...

Exploit for CVE-2026-64638

🛡️ CVE-2026-64638 - XSS2Shell WordPress Pre-Authentic...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

CVE-2026-64638: Improper Neutralization of Input During Web Page Generation

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

PT-2026-68882

Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...

CVE-2026-54088 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, the Hook Authentication feature in File Browser allows administrators to delegate login verification to an external shell command. User-supplie...

EUVD-2009-1202

Malware in sbrugna...

EUVD-2016-5051

Malware in sbrugna...

EUVD-2006-5945

Malware in sbrugna...

EUVD-2009-1430

Malware in sbrugna...

EUVD-2018-10520

Malware in sbrugna...

EUVD-2018-10521

Malware in sbrugna...

EUVD-2018-10519

Malware in sbrugna...

EUVD-2020-12595

Malware in sbrugna...

EUVD-2009-3514

Malware in sbrugna...

EUVD-2019-15514

Malware in sbrugna...

DirectAdmin Evolution Skin 安全漏洞

DirectAdmin Evolution Skin is an application from DirectAdmin, Inc. A security vulnerability exists in DirectAdmin Evolution Skin version 1.680 that stems from a specially crafted GET request that can manipulate the page layout, potentially causing the login screen to be replaced with...