CVE-2024-51793

CVE-2024-51793 エクスプロイトツール ドキュメント 📋 概要 CVE-2024-51793 は、Computer Repair Shop WordPress プラグイン（バージョン 3.8116 より前）における未認証の任意ファイルアップロードの脆弱性です。この脆弱性により、攻撃者は認証なしで PHP ウェブシェルを含む任意のファイルをアップロードでき、脆弱な WordPress サイトへのリモートコード実行につながります。 🚨 脆弱性の詳細 CVE ID: CVE-2024-51793 脆弱性の種類: 未認証の任意ファイルアップロード 影響を受けるプラグイン:...

POC-of-CVE-2022-36271

CVE-2022-36271 の PoC 影響を受ける製品の名前 : Outbyte PC Repair Installation File 影響を受けるバージョン : 1.7.112.7856 エントリのCVE ID : CVE-2022-36271 説明: iertutil.dllが存在しないため、攻撃者は同じ名前の悪意のあるDLLを使用して管理者権限を取得し、被害者のマシン上で持続的な攻撃を行うこともできます。 脆弱性タイプ: DLL Hijacking これはCVE-2022-36271の動作するPoCです。...

CVE-2026-19702

CVE-2026-19702 is an OS command injection vulnerability in TÜBİTAK BİLGEM's Pardus Boot Repair , caused by improper neutralization of special elements used in an OS command. The issue affects versions 1.0.7 through 1.0.7 (fixed in 1.0.8 ). The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...

EUVD-2026-68526

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2022-27502

RealVNC server hasta 6.9.0 Exploit de secuestro de DLL CVE-2022-27502 Puedes usar la versión precompilada 64 bits desde AQUÍ Cópialo a %TEMP% e inicia una reparación de RealVNC Server desde agregar o quitar programas. Escribirá la salida del comando whoami en %TEMP%\output.txt Si quieres cambiar ...

btrfs_fixes

btrfsfixes: カスタム BTRFS リペアツール 12TB マルチデバイス BTRFS プールにおいて、ネイティブコマンド（btrfs check --repair、--init-extent-tree など）では修復できなかった深刻なエクステントツリーの破損を回復するために作成されたカスタムツールです。 構造化されたリカバリのケーススタディ、根本原因の分類、およびこれらのツールのほとんどを不要にするはずだった上流btrfs-progs の改善提案については、INCIDENT-ANALYSIS.md を参照してください。 これらのツールを使用するタイミング...

DVDR_LLM

DVDR-LLM：大型语言模型何时协同工作能更好地检测和修复软件漏洞？ 研究论文的官方实现与工件： "DVDR-LLM：大型语言模型何时协同工作能更好地检测和修复软件漏洞？" 🎯 概述 DVDR-LLM 是一个集成框架，系统性地研究了聚合多个大型语言模型（LLM）进行软件漏洞检测与修复时的基本权衡。我们的综合评估揭示了在安全关键型应用中关于精确率-召回率平衡、模型多样性收益以及基于共识的方法的关键见解。 主要发现 精确率-召回率权衡 ：集成在补丁有效性评估中减少了误报（准确率+10-12%），但在漏洞识别中增加了漏报 复杂度收益...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - Escalada de Privilegios en la Reparación MSI del Agente CheckMK NanoCorp HTB Este repositorio contiene un script de PowerShell utilizado para explotar CVE-2024-0670 en la máquina NanoCorp de Hack The Box. La vulnerabilidad permite a un usuario con pocos privilegios abusar de la...

upx-recovery-tool

upx-recovery-tool upx-recovery-tool è uno script che mira a riparare le modifiche più comuni apportate dai creatori di malware ai file ELF UPX-compressi per impedirne l'unpacking automatico con un normale tool UPX. Correzioni UPX implementate / Funzionalità Questo strumento rileva e ripara le...

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – Escalation dei privilegi locali dell'Agente CheckMK PoC Questo repository contiene una proof-of-concept semplice e pulita per CVE-2024-0670, una vulnerabilità di escalation dei privilegi locali nell'agente Windows di CheckMK. Un utente con privilegi limitati può ottenere privilegi...

msi-search

MSI Search Windows memorizza nella cache i file MSI in C:\Windows\Installer\ con nomi di file casuali composti da lettere e numeri seguiti dall'estensione ".msi". Questo strumento semplifica il compito degli operatori red team e dei team di sicurezza di identificare quali file MSI corrispondono a...

mindmanager-poc

mindmanager-poc Betroffene Anwendung: MindManager23setup.exe Plattform: Windows Problem: Lokale Privilegienerweiterung über den Reparaturmodus des MSI-Installers EXE-Hijacking-Race-Condition Entdeckt und gemeldet von: Pawel Karwowski und Julian Horoszkiewicz Eviden Red Team Vorgeschlagene...

CVE-2024-0670

CVE-2024-0670 – Escalata dei Privilegi Locali nell'Agente CheckMK PowerShell PoC Abstract Questo repository presenta un proof of concept indipendente in PowerShell per CVE-2024-0670 , una vulnerabilità di escalation dei privilegi locali in Windows nell'Agente CheckMK. La vulnerabilità consente a ...

exocomp

Exocomp Ambiente multi-agente self-hosted pensato per Golang. Caratteristiche Attenzione, cercatori di profitto e visionari! Gli organici ti costano tempo, stipendi e - peggio di tutto - benefit? Allora potenzia oggi stesso la tua operazione con la nuovissima unità di riparazione adattiva Exocomp...

CVE-2026-80533

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs during the Allocation Group Information AGI repair process, specifically in the xrepiunlinkwalkondiskbucket function. If the buffer verifier fails, a null pointer dereference can occur when attempting to rebuild...

CVE-2026-80535

A flaw was found in the Linux kernel's XFS filesystem. When a local user or process attempts to delete a directory that refers to itself, the directory tree repair code incorrectly tries to acquire a lock on the same inode twice. This double-locking issue can lead to system instability or...

CVE-2026-80535 xfs: don't double-lock when deleting a self-referential directory

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535

CVE-2026-80535 affects the Linux kernel XFS file system. The dirtree scrubber can detect a directory that refers to itself; in that case, the directory tree repair code incorrectly attempts to iolock/ilock both sc->ip and dp, which are the same inode, resulting in a double-lock . The fix detec...

CVE-2026-80533 xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...

CVE-2026-80533

CVE-2026-80533 is a Linux kernel bug in the XFS filesystem's AGI repair path. The function xrep_iunlink_walk_ondisk_bucket walks ragi->sc->sa.agi_bp to rebuild unlinked inode lists, but agi_bp can be null if the buffer verifier fails, causing an out-of-bounds walk. The fix substitutes ragi-...