Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

CVE-2024-38124 和 CVE-2024-43468 的详细分析与缓解策略 CVE-2024-38124 和 CVE-2024-43468 的详细分析与脚本缓解策略 CVE-2024-38124：Windows Netlogon 技术利用背景： 在实际场景中，拥有网络访问权限的攻击者可以通过向域控制器发送特制的 Netlogon 消息来利用 CVE-2024-38124。这使他们能够冒充网络上的任何计算机，包括域控制器本身。攻击者可以提升权限，从而可能完全控制 Active Directory AD 环境，进而未经授权访问敏感信息或在整个网络部署恶意软件。 攻击路径示例： 1...

exploit_cve_2025_67303

exploitcve202567303 创建 CVE-2025-67303 的概念验证（PoC） 原始 PoC 位于 https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

Nexus-Repository-Manager-3-CVE-2020-11444-

This repository does not have a README...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-39069

ifood Order Manager 'Gestor de Peddios.exe' - DLL hijacking An attacker places a malicious DLL named "d3d12.dll" in a directory that is searched by the application before the legitimate "d3d12.dll" is found. When the application is launched, it loads the malicious DLL instead of the legitimate on...

CVE-2024-7627

Exploit para CVE-2024-7627 — Bit File Manager WordPress RCE no autenticado 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-7627 , una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada en el plugin de WordPress Bit File Manager...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2021-32161

..| XSStoCommandInjection2 |.. 描述： 利用反射型跨站脚本（XSS）攻击通过Webmin的文件管理器功能获取命令注入 测试版本： Webmin 1.973 GitHub 最新版本 2021-03-07 攻击类型： 远程 影响： 命令执行 漏洞利用代码 POC： 产品供应商： https://www.webmin.com 附加信息： "Webmin is a web-based system administration tool for Unix-like servers, and services with over 1,000,000...

CVE-2024-52375

WordPress Datasets Manager 💥 漏洞利用作者：Nxploit Khaled Alenazi 📅 CVE 发布时间：2024 年 11 月 14 日 🧠 CVSS 评分：10.0（严重） 🛠 CWE-434：危险类型文件的不受限制上传 📌 描述 在 Arttia Creative 的 Datasets Manager WordPress 插件中发现了一个严重漏洞，影响 直至并包括 1.5 的所有版本。 该插件在上传过程中未能正确验证文件类型，允许未经认证的攻击者上传任意文件（包括 PHP shells），从而实现远程代码执行（RCE） 。 🧠 CVE 详情 CVE...

Big-IP-Next-CVE-2024-26026

CVE-2024-26026 BIG-IP Next Central Manager API UNAUTHENTICATED SQL INJECTION link: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...

CVE-2015-8277-Exploit

POC del exploit CVE-2015-8277 Este es un exploit de prueba de concepto para la versión 11.12.1.2 de lmgrdFlexera Licence Manager, que se incluyó como parte de Flexnet Publisher al implementar ArcGIS 10.3.1. Consulte https://www.securifera.com/advisories/cve-2015-8277/ para obtener más detalles...

magento2-encryption-key-manager-cli

Magento 2 加密密钥管理器 CLI 一款用于 Magento 2 加密密钥轮换和管理的实用工具。CVE-2024-34102（又名 Cosmic Sting）的受害者可将其用于善后处理。 设计用途 开发用途 部署自动化 CVE-2024-34102（又名 Cosmic Sting）善后处理 CVE-2024-34102（又名 Cosmic Sting） 应用安全补丁后，您需要执行一次密钥轮换，以完全阻止攻击者通过管理员级别的 WebAPI 访问。 如果您无法升级或应用官方隔离补丁，请参阅 我们的补丁。 如果官方的加密密钥轮换命令 php bin/magento...

cve-2020-14008

CVE-2020-14008 ManageEngine Exploit What is this? This script exploits CVE-2020-14008 in ManageEngine Applications Manager to get a reverse shell with SYSTEM privileges. Requirements root@kitploit: pip3 install requests urllib3 How to use it 1. Start a listener root@kitploit: nc -nlvp 9001 2. Run...

CVE-2025-56807

CVE-2025-56807 Description A Stored Cross Site Scripting XSS vulnerability was discovered in FairSketch RISE Ultimate Project Manager & CRM v3.9.4 in the File Manager functionality. The vulnerability lies in the title parameter that is submitted when creating new folders. Due to insufficient inpu...

Heroinn

Heroinn A cross platform C2/post-exploitation framework implementation by Rust. This project is for research and study purposes only, and any illegal behavior using this project has nothing to do with this project. Features GUI Interactive PTY shell System infomations collect File manager support...

CVE-2026-87919

The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the user's capability over the targeted product, allowing users with contributor-level access to delete arbitrary WooCommerce products by...

CVE-2026-87919 Product XML Feed Manager for WooCommerce < 3.1.1 - Contributor+ Arbitrary Product Deletion via Shortcode

The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the user's capability over the targeted product, allowing users with contributor-level access to delete arbitrary WooCommerce products by...

EUVD-2026-76807

The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the user's capability over the targeted product, allowing users with contributor-level access to delete arbitrary WooCommerce products by...