win32k-callback-detouring

면책 조항 이 저장소는 교육 및 방어적 연구 목적으로만 제공됩니다. 이는 개념 증명 맥락에서 Windows 내부 콜백 디스패치 메커니즘과 KernelCallbackTable 관련 제어 흐름 개념을 시연합니다. 무단 사용을 위한 것이 아닙니다 운영 배포를 위해 설계되지 않았습니다 스텔스/작전 보안 고려 사항이 없습니다 소유하거나 테스트 권한이 있는 통제된 실험실 환경에서만 사용하십시오 저자는 오용에 대해 책임을 지지 않습니다. Win32k 콜백 디토어링: 합법적인 커널-사용자 콜백 디스패치를 악용한 코드 실행 개요 이 주입 기법...

DNCI

DNCI - 닷넷 코드 인젝터 DNCI는 윈도우의 비관리 프로세스에 .Net 코드.exe 또는 .dll를 원격으로 주입할 수 있습니다. 1. 프로젝트 구조 프로젝트는 다음과 같이 구성됩니다: DNCI.Injector.Library - 주입 라이브러리. 모든 주입 구성 요소와 로직을 포함합니다; DNCI.Injector.Runner - 주입용 명령줄 유틸리티; DNCIClrLoader - .NET 어셈블리를 메모리에 로드하는 C++ 마이크로코드; InjectDemo.Console.ClassicNet - 주입될 데모...

shed

Shed - .NET 런타임 검사기 Shed는 프로그램의 .NET 런타임을 검사하여 유용한 정보를 추출할 수 있는 애플리케이션입니다. 악성 애플리케이션을 검사하여 맬웨어가 실행될 때 저장되는 정보에 대한 첫 번째 일반 개요를 확인하는 데 사용할 수 있습니다. Shed는 다음을 수행할 수 있습니다: 원격 프로세스관리형 및 비관리형 모두에 .NET 어셈블리 주입 관리형 힙에 저장된 모든 객체 추출 메모리에 저장된 문자열 출력 사후 처리를 위해 힙 스냅샷을 JSON 형식으로 저장 메모리에 로드된 모든 모듈 덤프 다운로드 소스 코드...

XXL-JOB v2.2.0 — Stored Cross Site Scripting

Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file. id: CVE-2020-23814 info: name: XXL-JOB v2.2.0 — Stored Cross Site Scripting author:...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

AtlasLdr

Atlas는 다음과 같은 기능을 갖춘 리플렉티브reflective x64 로더입니다: 기능 원격 서버에서 DLL 및 PE 가져오기 원격 프로세스에 대한 수동 매핑Manual Mapping DOS 헤더 및 NTHeader 매직 바이트 지우기 위치 독립 코드Position independent code 간접 Syscall 사용 ZwOpenProcess ZwAllocateVirtualMemory ZwProtectVirtualMemory ZwQuerySystemInformation ZwFreeVirtualMemory...

Astra Linux – Vulnerability in exim4

Exim 4.98 before 4.98.1 allowed remote SQL injection when SQLite hints and ETRN serialization were used. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2026-19354

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go of the component IN Clause Handler. Performing a manipulation of the argument ids results in sql injection. The attac...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

EUVD-2026-54913

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-71409 No Authentication for Very High Frequency Data Link messages used in CPDLC

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

CVE-2026-19069 itsourcecode Hospital Management System treatmentrecord.php sql injection

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-19062 chiuwingyan house selectall.action sql injection

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

EUVD-2026-53867

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function newqoslimitstart of the file /etc/qoslimit. The manipulation of the argument newqoslimitenable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available a...

CVE-2026-19021

SourceCodester Computer Repair Shop Management System 1.0 is affected by a remote SQL injection in the file /classes/Master.php?f=delete_product, caused by manipulated ID parameter. The vulnerability can be exploited without authentication and has publicly disclosed exploit details. No patch/reme...

CVE-2026-8478

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2026-18613

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2026-18613

GL-iNet GL-MT3000 (firmware up to 4.4.5) is affected by a vulnerability in the plugins.so Native Plugin: the function plugins.set_config in /cgi-bin/glc can be manipulated to cause injection. The attack is remote and publicly disclosed; vendor awareness confirmed. No remediation details are provi...