bitbucket-test

CVE-2022-36804 を調査するための Docker コンテナ Bitbucket がユーザー入力をサニタイズせず、攻撃者が Git フラグを注入してリモートでコードを実行できるようにする、リモートコード実行の脆弱性を再現します。 このリポジトリは、Bitbucket Server における事前認証の引数インジェクションの問題である CVE-2022-36804 を再現した方法を文書化したものです。目的は、Assetnote の公開記事に記載されている根本的なセキュリティ問題を実証することでした。すべてのテストは隔離されたローカル環境で実施されました。 概要...

SIOCtl

SIOCtl 간단한 IOCTL 디스패처 이것은 일반적인 IOCTL "디스패처"입니다. CVE 2018-8060 및 CVE 2018-8061의 PoC로 사용하기 위해 만들었지만, 모든 디바이스, IOCTL 및 데이터에 사용할 수 있습니다. 입력 데이터는 이진 파일로, IO 제어에서 입력 버퍼로 사용할 원시 데이터를 포함합니다. 출력 데이터는 16진수 덤프로 표시됩니다. CVE 2018-8060 설명: HWiNFO AMD64 커널 드라이버 버전 8.98 이하에서는 권한이 없는 사용자가 IOCTL을 디바이스 드라이버에 보낼 수...

CVE-2021-26690---Apache-mod_session

对 CVE-2021-26690 的补丁差异分析 - Apache modsession 此漏洞是 Apache 的 modsession 模块中的空指针解引用。 它将导致 Apache httpd 的子进程拒绝服务。 通过使用重复循环，每个 Apache worker 都会崩溃，从而导致所有连接或已连接到该网站的客户端拒绝服务。 该漏洞最初由 @antonio-morales 发现。 有关完整过程，请参阅本仓库中的 PDF。 限制 如果服务器通过 modsessioncrypto 实现了 SessionCryptoPassphrase 选项，则 cookie 将被加密并进行 base6...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE 익스플로잇 익스플로잇 제목: Lua 인젝션을 통한 Wing FTP Server 7.4.4 원격 코드 실행 CVE: CVE-2025-47812 테스트 환경: Wing FTP Server v7.3.x Windows/Linux 영향: SYSTEM/root 권한의 원격 코드 실행 RCE 심각도: 치명적 설명 Wing FTP Server의 로그인 입력에서 \0널 바이트 처리 과정의 취약점으로 인해 공격자가 사용자 또는 관리자 웹 인터페이스를 통해 세션 파일에 임의의 Lu...

CVE-2021-3156

exploit.py 从 @worawit 分支而来，更短且优化。仅在Centos7上的sudo=1.8.23版本有效。 同时在Web服务器和Linux机器上工作。 backdoor.php 通过weevely生成的php后门，密码："H@rmWsH4rE!"。如果成功上传到服务器，则提供以Apache身份访问ssh会话的权限。 shell.php%00.jpg Null-Byte php文件清理绕过。...

CVE-2011-1237

CVE-2011-1237 これは、2013年に作成されたWindows 7向けのCVE-2011-1237の古いPOCです。 この脆弱性はTarjei Mandt（@kernelpool）によって発見され、彼の論文 Kernel Attacks through User-Mode Callbacks で説明されています。 このPOCではいくつかの値がハードコードされており、Nullページを呼び出しますが、これはもはや機能しません。このエクスプロイトについては、私の講演 A Look into the Windows Kernel で説明しています。...

EUVD-2026-77009

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in the function msg_subscription_publish_bs__alloc_notification_message_items(). The root cause is that a failed heap allocation for a DataChangeNotification is overwritten by a subsequent successful allocation for an EventNotificationList ,...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

Analisi-CVE-2017-5715

이 저장소에는 README가 없습니다...

CVE-2022-21449

CVE-2022-21449 用于检测针对 TLS 客户端的 CVE-2022-21449 利用尝试的 Zeek 脚本。仅适用于 TLS 1.2 及以下版本。 安装 zkg install https://github.com/thack1/CVE-2022-21449 运行 对提供的 pcap 文件运行： $ zeek -Cr pcaps/CVE-2022-21449.pcap CVE-2022-21449 示例通知 root@kitploit: separator \x09 setseparator , emptyfield empty unsetfield - path notic...

CVE-2022-34556

CVE-2022-34556 설명 PicoC v3.2.2에서 variable.c에 NULL 포인터 역참조null pointer dereference가 발견되었습니다. Picoc를 사용하는 모든 프로젝트나 라이브러리도 이 문제의 영향을 받습니다. 예를 들어 picoc-js가 있습니다. 환경 설정 PicoC에서 NULL 포인터 역참조 취약점을 재현하려면 먼저 취약한 버전v3.2.2의 PicoC 라이브러리와 인터프리터를 다운로드하고 컴파일해야 합니다: root@kitploit: git clone...

EUVD-2026-76913

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

UBUNTU-CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

PT-2026-90942

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf node list add child of the file scenegraph/base scenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The...

FreeBSD : znc -- multiple vulnerabilities (b7ae786a-af80-11f1-9800-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b7ae786a-af80-11f1-9800-641c67a117d8 advisory. ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged...

PT-2026-90983

The MQTT-SN client keepalive handler process ping in subsys/net/lib/mqtt sn/mqtt sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS SLIST PEEK HEAD CONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign t...

Linux Distros Unpatched Vulnerability : CVE-2026-90648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a table flip attack. It does not...