vulnerability-poc

漏洞 PoC 仓库 精选的高危 CVE 概念验证（PoC）代码、测试实验室和防护规则——专为授权安全测试、渗透测试、CTF 挑战和安全研究 而构建。 由 SeekersLab 团队维护。每个条目均附带仅用于检测的 PoC 脚本、Docker 测试实验室（含存在漏洞和已修复的应用）、双语（英语 / 한국어）文档以及可直接部署的防护规则。 ⚠️ 免责声明 本代码仅供教育目的、授权渗透测试、CTF 挑战和安全研究使用。 请勿在未经明确书面授权的情况下针对任何系统使用这些 PoC。未经授权访问计算机系统属于违法行为。 CVE 索引 2022 年 CVE CVE ID| 严重性| 厂商| 描述...

rosa-vega-gonzalez.essenty.com Cross Site Scripting vulnerability OBB-2506560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

esthetic.uz Cross Site Scripting vulnerability OBB-1483278

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

VMware Carbon Black First to Block Hidden Malicious Commands in Obfuscated Scripts

For a long time now, our Threat Analysts have flagged the growing threat of script-based attacks, especially from Microsoft PowerShell and Windows Management Interface script commands, and their ability to escape notice in many antivirus solutions. Increasingly, these types of attacks have become...

Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 XSS

!-- Exploit Title: Cross Site Scripting in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 Administration zone Date: 31-01-2019 Exploit Author: Rafael Pedrero Vendor Homepage: https://www.manageengine.com/products/netflow/?doc Software Link:...

Using MITRE ATT&CK When Researching Attacker Behavior in a Post-Compromise World

MITRE ATT&CK is arguably one of the best assets available to security professionals who want to dive into the intricacies of detecting and preventing adversary behaviors. Why is that? It’s a great knowledge base of known adversarial behaviors overlayed with attacker TTPs and their state in the...

stemscopes.com XSS vulnerability

Open Bug Bounty ID: OBB-573643 Description| Value ---|--- Affected Website:| stemscopes.com Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO 2914...