271516 matches found
EUVD-2026-72813
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12648
CVE-2026-12648 is a Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM versions prior to 2026.2 . A remote authenticated attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the server, with low attack complexity and no user interaction...
CVE-2026-12648
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72804
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12745
Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability that allows a remote unauthenticated attacker to execute arbitrary code on the server. The assigned CVSS 3.1 score is 9.8 (CRITICAL) , with a network attack vector, low complexity, no ...
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
EUVD-2026-72797
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating n...
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
follina-msdt-threat-investigation
Follina — CVE-2022-30190 威胁分析 Microsoft MSDT远程代码执行零日漏洞 — 活跃利用调查 by MUHAMMAD ZAWAR KHATTAK 🔗 查看完整分析报告 → 🧪 场景 周五晚上，团队收到一个正在野外被积极利用的新RCE漏洞警报。我的任务是分析和研究恶意样本，为周末团队收集情报。 🧰 使用的工具 工具| 用途 ---|--- VirusTotal| 静态分析、文件哈希、联系URL Any.Run| 动态沙箱、MITRE ATT&CK映射 CVE.org| 官方漏洞研究 OSINT / GitHub| 检测规则、威胁情报 Linux CLI|...
CVE-2026-48908-joomla-sp-page-builder-detection
CVE-2026-48908 — Joomla SP Page Builder 验证与检测 针对 Joomla SP Page Builder 组件中 CVE-2026-48908 的实验室验证，侧重于技术证据、事件重建和防御性检测机会。 本仓库记录了一次受控测试，其中 SP Page Builder 的 asset.uploadCustomIcon 端点接受了上传的图标压缩包，导致在 Joomla 媒体目录下写入了 PHP 构件。通过 HTTP 调用上传的 PHP 文件，以 Web 服务器进程用户的身份执行了命令。由此产生的 HTTP、文件、进程、认证和网络活动，通过 Apache...
CVE-2026-56291
自動スキャンバージョン & エクスプロイト CVE-2026-56291 POC Joomla Balbooa Formsにおける未認証の任意ファイルアップロードによるRCE FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...
Vulnerability-Assessment-and-OSINT-CVE-2012-1823
漏洞评估与OSINT：CVE-2012-1823 我的仓库记录了在目标网络扫描中发现、分析并收集特定安全漏洞的开源情报（OSINT）的完整过程。 流程概览 本次评估执行的工作流程分为四个主要阶段： 1. 侦察与漏洞检测 使用工具 ：Nmap 操作 ：使用以下命令执行高级网络扫描： root@kitploit: nmap --script-help http-vuln-cve2012-1823 发现结果 ：目标环境正在运行过时的 PHP-CGI 配置。NSE（Nmap 脚本引擎）脚本确认存在 CVE-2012-1823 ，这是一个侵入性的 PHP-CGI...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Windows iSCSI Remote Code Execution Vulnerability
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...