sunflower_exp

CVE-2022-10270 영향 버전: 向日葵 개인판 Windows --thread 스캔 시 스레드 수 기본 스레드 수: 100 --help 도움말 sunflowerpocexp.py 취약점 검증 및 스캔 도구 포트 탐지: 예: python sunflowerpocexp.py --scan --ip --port --thread 매개변수는 사용자가 지정해야 합니다. python sunflowerpocexp.py --scan 모두 기본 매개변수를 사용합니다. --scan 스캔 매개변수 --ip 스캔할 IP 주소 기본 스캔 IP...

CVE-2024-27564

CVE-2024-27564 설명: pictureproxy.php의 취약점으로 인해 원격 공격자가 url 매개변수에 URL을 주입하여 임의의 요청을 수행할 수 있습니다. 이 SSRF 취약점은 인증 없이 악용될 수 있어 특히 위험합니다. 취약한 코드는 pictureproxy.php 파일에 있습니다. 이 함수가 url 매개변수를 제대로 검증하지 않기 때문에 문제가 발생합니다. $GET'url' 변수는 filegetcontents 함수에 전달되며, 이 함수는 지정된 URL에서 콘텐츠를 가져옵니다. 이로 인해 SSRF가 발생할 수...

CVE-2026-11967

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an...

CVE-2026-11879

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. During startup, the application searches for specific DLLs in this location before resorti...

CVE-2026-11967 Arbitrary code execution in MobaXterm Personal Edition (Portable)

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an...

CVE-2026-11879 Arbitrary code execution in MobaXterm Personal Edition (Portable)

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. During startup, the application searches for specific DLLs in this location before resorti...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Technical details are not publicly provided in the supplied documents. Monitor for updates from Dell/NVD for affected products, impact, and remediation.

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

PT-2026-41664

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

EUVD-2001-1121

Malware in sbrugna...

EUVD-2002-1664

Malware in sbrugna...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

CVE-2021-42713 affects Splashtop Remote Client (Personal Edition) up to version 3.4.6.1. The vulnerability stems from the creation of a Temporary File in a directory with insecure permissions, enabling potential local impact. PT-2022-11668 documents this issue and provides a remediation path: upg...

PT-2022-11668 · Splashtop · Splashtop Remote Client

Name of the Vulnerable Software and Affected Versions: Splashtop Remote Client Personal Edition versions 3.4.6.1 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions 3.4.6.1 and earlier, update to...

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...