Malicious code in contoso-login-sim-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ce76699c91a883d24e3ad609bb04faa3f52cbeaecfb24c1c3bcde8b496a5c Package ships a single 138 KB browser script whose entire body is an RC4-encrypted base64 blob decoded at runtime by an inline RC4 routine zc with a...

CVE-2026-102321

A type confusion flaw exists in the V8 component of the Google Chrome browser (prior to version 154.0.8037.92 ). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by hosting a crafted HTML page. No specific exploit information or evidence of in-the-wild expl...

SharpWMI

SharpWMI SharpWMI 是一个 C 实现的多种 WMI 功能集合。包括本地/远程 WMI 查询、通过 win32process 远程创建进程、以及通过 WMI 事件订阅远程执行任意 VBS。远程方法还支持备用凭据。 @harmj0y 是主要作者。 SharpWMI 使用 BSD 3-Clause 许可证授权。 用法 本地系统枚举： SharpWMI.exe action=query query=""select from win32service"" namespace=BLAH 远程系统枚举： SharpWMI.exe action=query...

MaccaroniC2

MaccaroniC2 - 使用AsyncSSH赋能命令与控制 MaccaroniC2 是一个 概念验证 的命令与控制框架 ，它利用了强大的 AsyncSSH Python 库，该库提供了 SSHv2 协议的异步客户端和服务器实现，并使用 PyNgrok 封装来集成 ngrok。此工具针对一个特定场景设计：受害者在受控机器上运行 AsyncSSH 服务器并建立到外部的隧道，等待攻击者发送命令。 攻击者利用 Ngrok 官方 API 获取隧道的主机名和端口以建立连接。这种方法充分利用了 AsyncSSH 提供的全面能力，包括对 SFTP 和 SCP...

SharpMove

SharpMove - 对远程主机进行 .NET 认证执行 编译 要编译，请打开 Visual Studio 项目并编译为发布版本。 选项 WMI SCM DCOM 多种 任务计划程序 服务 DLL 劫持 DCOM 服务器劫持 修改计划任务 修改服务 binpath SharpMove.exe action=query computername=remote.host.local query="select from win32process" username=domain\user password=password SharpMove.exe action=create...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket 实现的 PrintNightmare PoC，原作者为 Zhiniang Peng @edwardzpeng 和 Xuefeng Li @lxf02942370 已在完全修补的 2019 域控制器上测试 远程或本地执行恶意 DLL 安装 在运行漏洞利用之前，你需要安装我的 Impacket 版本，之后就一切就绪了 pip3 uninstall impacket git clone https://github.com/cube0x0/impacket cd impacket python3 ./setup.p...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

gargamel

Gargamel 编译 已使用 Rust 1.50+ 完成编译和测试。 在项目目录中打开终端，输入以下命令编译 release 版本： cargo build --release 调试版本可使用以下命令编译： cargo build 编译后的可执行文件分别位于 target/release/gargamel.exe 或 target/debug/gargamel.exe。 设置日志级别 如果希望更改日志级别： 打开 src/main.rs 在第 42 和 43 行，将 LevelFilter::Info 改为（例如）LevelFilter::Trace 以获得更详细的日志。 注意...

nimux

Kit de enumeración de red y ejecución remota en Nim puro nimux - Kit de herramientas nativas para operadores nimux es una superficie de comandos nativa para evaluaciones de seguridad autorizadas. Combina enumeración de red, descubrimiento web ligero, validación de credenciales, operaciones de...

smbexec

smbexec Un ataque rápido al estilo psexec con herramientas samba Concepto y script originales de Brav0Hax & PureHate Portado a Ruby y modificado por Smilingraccoon y Zeknox Nombre clave - Machiavellian Escrito porque nos hartamos de que Metasploit PSExec fuera detectado Un agradecimiento especial...

Fu3l-F1lt3r

|\ \ |\ |\ |\ \ |\ / |\ \ |\ \ |\ \ \ \ /\ \ \\ ||\ /\ \ \ \ \ /|/|\ \ \ \| \ \||\ /\ \ |\ \ \ \ \ \ \\ \ |\ \ \ \ \ \ |/ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ | \ \ \\ \ \ \ \ \ \ \ | \ \ \ \ \ \ \ \ \ \ \ | \ \ \ \|\ \ \ \ \ \ \ \ |\ \\ \ || |||||| || ||||||...

WMIExec

WMIexec 一组Python脚本，通过WMI协议以不同方式执行命令。 博客文章 https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ 使用方法 wmiexecscheduledjob.py 是一个Python脚本，通过计划任务认证到远程WMI实例并执行命令。 运行脚本： python3 wmiexecscheduledjob.py -i -u -p -c wmiexecwin32process.py...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd命令执行 ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013 . drwxr-xr-x 16 0 0 0...

n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution

n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

TYPO3 ceselector Extension - Insecure Deserialization

TYPO3 extension contains a PHP Object Injection caused by passing attacker-controlled cookie to unserialize without validation, letting remote unauthenticated attackers achieve remote code execution, exploit requires Persistent Mode: Static configuration. id: CVE-2026-46725 info: name: TYPO3...