24 matches found
By-Poloss..-..CVE-2026-9067
POC & Xploit - 개념 증명 디렉토리 WordPress 보안 테스트 환경에서 발견된 취약점에 대한 문서 및 익스플로잇 취약점 목록 CVE ID| 플러그인| 심각도| 유형| 상태 ---|---|---|---|--- CVE-2026-9067| Schema & Structured Data for WP & AMP| 높음 8.1| 무제한 파일 업로드| 문서화됨 CVE-2026-9067 빠른 요약 취약점 설명 Schema & Structured Data for WP & AMP 플러그인 버전 1.60 미만은 파일 업로드를 위한...
Vulnerability_PoC
興味深い脆弱性のPoC/Exploit 著者: Numen Cyber Labs 脆弱性研究チーム 1. TCP/IP RCE脆弱性 CVE-2022–34718 PoCの復元と分析 https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf 2. CVE-2022–36537脆弱性の技術的分析（Exploit付き）...
CVE-2017-5638
CVE-2017-5638 CVE-2017-5638 PoCエクスプロイト...
CISA-KEV
CISA-KEV エグゼクティブサマリー このリポジトリは、CISA KEV と VulnCheck KEV の両方のカタログを自動追跡・分析し、Nucleiセキュリティテンプレートや公開PoCエクスプロイトと相互参照します。VulnCheck KEVを統合することで、対象CVEは1,557件から 4,720件のユニークなCVE へと拡大し、3倍 に増加します。統合データセットから、全KEV脆弱性の36.1%がNucleiテンプレートでアクティブスキャン可能（1,702 CVE）であることが明らかになりました。VulnCheckの拡張カバレッジにより、CISA公式リストにない...
WinDriver-EXP
脆弱性のあるWindowsドライバー向けPoCリポジトリ このリポジトリには、Windowsドライバーの脆弱性を実証するPoCエクスプロイトが含まれており、特権昇格、任意のコード実行、またはその他のセキュリティリスクにつながる可能性のある欠陥を示しています。研究および教育目的のみを意図しています。 PoC一覧 脆弱性| CVE ID| コンポーネント ---|---|--- Windows カーネルの特権昇格の脆弱性| CVE-2024-21338| appid.sys Windows Kernel Streaming の特権昇格の脆弱性| CVE-2024-30084| ks.sys...
My-PoC-Exploits
My-PoC-Exploits 제가 작성한 PoC exploits입니다. 있는 그대로 제공되며, 지원을 제공하지 않습니다...
CVEs
Rhino CVE 概念実証エクスプロイト Rhino Security Labs のチームによって書かれた、さまざまな CVE に対する概念実証エクスプロイトスクリプトのコレクションです。 CVE-2025-32815: Infoblox NetMRI のハードコードされた認証情報による認証バイパス CVE-2025-32814: skipjackUsername を介した Infoblox NetMRI の未認証 SQL インジェクション CVE-2025-32813: getsamlrequest における Infoblox NetMRI の未認証コマンドインジェクション...
research
セキュリティ研究 私が発見したセキュリティ脆弱性（CVE）に関するリポジトリです。本リポジトリには、発見した脆弱性の詳細な技術文書、概念実証（PoC）エクスプロイト、および分析が含まれています。 概要 本リポジトリは、私が発見・調査したすべてのCVEをまとめたもので、以下を含みます： 各脆弱性の詳細な技術分析 教育目的の概念実証（PoC）コード 攻撃シナリオと影響評価 修正状況とパッチ情報 公式CVEレコードへの参照 発見したCVE CVE-2026-26158 - BusyBox Hardlink Bypass 9.3 緊急 CVE-2026-26157 - BusyBox Path...
same_type_object_reuse_exploits
PoC 同一型/同一アドレスオブジェクト再利用エクスプロイト Mathias Krause が開発した PoC エクスプロイト。ブログ https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse に関連します。...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
PoC Exploits Do More Good Than Harm: Threatpost Poll
When it comes to the release of proof-of-concept PoC exploits, more security experts agree that the positives outweigh the negatives, according to a recent and informal Threatpost poll. Last week, Threatpost conducted a reader poll and almost 60 percent of 230 security pundits thought it was a...
Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?
The practice of disclosing proof-of-concept PoC exploits has long caused a debate in the security community. As the name suggests, these outline steps used to exploit a vulnerability in a system to show how it can be done — and are used to test networks and pinpoint vulnerable aspects of a system...
News Wrap: PoC Exploits, Cable Haunt and Joker Malware
This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...
PoC Exploits Published For Microsoft Crypto Bug
Two proof-of-concept PoC exploits have been publicly released for the recently-patched crypto-spoofing vulnerability found by the National Security Agency and reported to Microsoft. The vulnerability CVE-2020-0601 could enable an attacker to spoof a code-signing certificate necessary for validati...
ShareCMS 0.1 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
QNX Multiple Vulnerabilities
OVERVIEW Independent researcher Luigi Auriemma identified a stack-based buffer overflow and a buffer copy without checking size of input vulnerabilities in QNX’s Phrelay, Phwindows, and Phditto products without coordination with ICS-CERT, the vendor, or any other coordinating entity known to...
WSN Links SQL Injection
'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...
ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...
sharecms-sql.txt
============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...