pyGPOAbuse

pyGPOAbuse Filter Additions by D4RKMATT3R DISCLAIMER: This was only tested briefly in a local AD environment I take no responsibility for any unprecedented behavior or malfunctioning, it is provided as-is, for authorized testing only, entirely at your own risk. Now supports filtered targeting of...

GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...

ScheduleRunner

ScheduleRunner - A C tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and...

CVE-2025-60710

CVE-2025-60710 これは、スケジュールタスク \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration におけるローカル特権昇格の脆弱性のPoCです。 このスケジュールタスクが開始されると、taskhostw.exeプロセスは、C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP ディレクトリを開き、次のフィルターを使用してディレクトリを検索しようとします:...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - 多要素認証（MFA）バイパス エクスプロイトタイトル: Userlock - 多要素認証（MFA）バイパス 日付: 01/11/2023 エクスプロイト作者: Pinar Sadioglu ベンダーホームページ: https://www.isdecisions.com/products/userlock/help/ バージョン: schtasks /create /tn "MFABypassOnLogon" /sc onlogon /tr "cmd.exe /c powershell.exe"...

CVE-2025-60710

CVE-2025-60710 这是针对 \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration 计划任务中本地权限提升漏洞的概念验证代码。 当该计划任务启动时，taskhostw.exe 进程会尝试打开 C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP 目录，并使用以下过滤器搜索子目录：????????-????-????-????-????????????。如果找到该目录，则会在未检查符号链接的情况下将其删除。 由于低权限用户默认可以在其自己的 %LOCALAPPDATA...

CVE-2026-85040

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040 ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040

ZhongBangKeJi CRMEB (up to 6.0.0 ) is vulnerable to OS command injection in the Custom Scheduled Task feature. The eval function in /adminapi/system/crontab/save unsafely processes the customCode argument, allowing remote attackers to inject operating-system commands. The vendor documents this as...

Malicious code in mfacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8426c0e4e80e0bd9839d8517e060bd923775b8a3e100aab57e18b4f47c970e On require'mfacord', index.js loads lib/cache.js, which on win32 decodes a hardcoded URL...

Astra Linux – Vulnerability in Firefox and Thunderbird

During operations on MessageTasks, a task may be removed while it is still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.15, Thunderbird 91.2, Firefox ESR 91.2, Firefox ESR 78.15, and Firefox 93...

PT-2026-71690

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598

CVE-2026-17598 affects Sonatype Nexus Repository 3. The issue is improper input validation in scheduled task configuration: internal configuration keys from user-supplied task properties are not properly filtered when creating/updating a scheduled task via the admin UI. A user with permission to ...

Malicious code in crypto-validate-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaq...

MAL-2026-10586 Malicious code in crypto-validate-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaq...

MAL-2026-10591 Malicious code in solana-key-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b4680547530fce361014fe8c228734a8ec33bc8c834f46285e371e8f6b9f92 On require, index.js waits 37 seconds, reads test/fixtures/keypairs.dat a 53KB base64 blob disguised as a test fixture, no test harness references it...

CVE-2026-15499

AstrBotDevs AstrBot (versions up to 4.25.2) contains a vulnerability in the function FutureTaskTool.call (astrbot/core/tools/cron_tools.py). Manipulating payload["note"] leads to improper authorization, enabling remote exploitation. Public exploit availability is reported. No remediation details ...