pyGPOAbuse

pyGPOAbuse D4RKMATT3R의 필터 추가 기능 면책 조항: 이 도구는 로컬 AD 환경에서만 간단히 테스트되었습니다. 예상치 못한 동작이나 오작동에 대해 책임지지 않으며, 있는 그대로 제공되며, 승인된 테스트 용도로만 사용해야 하며, 전적으로 사용자 본인의 책임 하에 사용하십시오. 이제 SharpGPOAbuse와 유사하게 사용자 또는 호스트를 필터링하여 대상 지정을 지원합니다. 시나리오: GPO가 Active-Directory 도메인에 연결되어 있어 작업이 해당 도메인 내의 모든 영향을 받는 개체사용자/호스트에 적용되...

CVE-2025-60710

CVE-2025-60710 これは、スケジュールタスク \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration におけるローカル特権昇格の脆弱性のPoCです。 このスケジュールタスクが開始されると、taskhostw.exeプロセスは、C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP ディレクトリを開き、次のフィルターを使用してディレクトリを検索しようとします:...

ScheduleRunner

ScheduleRunner - A C tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - 多要素認証（MFA）バイパス エクスプロイトタイトル: Userlock - 多要素認証（MFA）バイパス 日付: 01/11/2023 エクスプロイト作者: Pinar Sadioglu ベンダーホームページ: https://www.isdecisions.com/products/userlock/help/ バージョン: schtasks /create /tn "MFABypassOnLogon" /sc onlogon /tr "cmd.exe /c powershell.exe"...

GhostTask

Ghost 예약 작업 WithSecure의 예약 작업 변조 연구에서 영감을 받아, 그들은 레지스트리 키 조작만으로 예약 작업을 생성하는 것이 가능함을 설명했습니다. 이러한 접근 방식은 4698 및 106과 같은 예약 작업 생성 이벤트 로그 생성을 우회할 수 있어, 지속성을 유지하는 더 은밀한 방법을 제공합니다. 이러한 통찰을 바탕으로, 저는 레지스트리 직접 조작을 통해 예약 작업 생성을 시연하는 이 POC를 개발했습니다. 새로운 예약 작업을 생성하려면 여러 레지스트리 키와 관련 값을 추가해야 합니다. 예약 작업과 관련된 레지스...

CVE-2025-60710

CVE-2025-60710 これは、\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration スケジュールタスクにおけるローカル権限昇格の脆弱性の PoC です。 このスケジュールタスクが開始されると、taskhostw.exe プロセスが C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP ディレクトリを開こうとし、次のフィルターを使用してディレクトリを検索します:...

Astra Linux – Vulnerability in Firefox and Thunderbird

During operations on MessageTasks, a task may be removed while it is still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.15, Thunderbird 91.2, Firefox ESR 91.2, Firefox ESR 78.15, and Firefox 93...

CVE-2026-86177: Missing Authorization

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

CVE-2026-85040

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040 ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040 ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040

ZhongBangKeJi CRMEB (up to 6.0.0 ) is vulnerable to OS command injection in the Custom Scheduled Task feature. The eval function in /adminapi/system/crontab/save unsafely processes the customCode argument, allowing remote attackers to inject operating-system commands. The vendor documents this as...

PT-2026-84914

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

Malicious code in mfacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8426c0e4e80e0bd9839d8517e060bd923775b8a3e100aab57e18b4f47c970e On require'mfacord', index.js loads lib/cache.js, which on win32 decodes a hardcoded URL...

PT-2026-71690

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598

CVE-2026-17598 affects Sonatype Nexus Repository 3. The issue is improper input validation in scheduled task configuration: internal configuration keys from user-supplied task properties are not properly filtered when creating/updating a scheduled task via the admin UI. A user with permission to ...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...