wptsextensions.dll

Task Scheduler の DLL ハイジャックを悪用するための WptsExtensions.dll （ 修正予定なし ） x64 Visual Studio の環境変数を読み込みます： root@kitploit: "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" TCHAR script 変数を、DLL が検索される書き込み可能な SYSTEM パスに更新します。 そのようなパスを見つけるには、この ツール を確認してください。...

CVE-2022-0540-RCE

RCE de Bypass de Autenticação no Atlassian Jira Seraph（CVE-2022-0540） Inglês • 中文 Detalhes do Exploit Conforme visto no blog do autor, a Atlassian forneceu uma longa lista de plugins afetados a grande maioria dos quais eram falsos positivos, e o autor listou vários plugins realmente afetados De...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler نبذة Apache DolphinScheduler هي منصة حديثة لتنسيق البيانات تتيح تطويرًا مرنًا ومنخفض الكود لسير عمل عالي الأداء. وهي مخصصة للتعامل مع التبعيات المعقدة بين المهام في خطوط معالجة البيانات، وتوفر مجموعة واسعة من أنواع المهام المدمجة جاهزة للاستخدام فورًا فيما يلي أبرز ميزات...

WPTaskScheduler_CVE-2024-49039

Persistenza di WPTaskScheduler e CVE-2024-49039, come una delle superfici di attacco all'interno di Task Scheduler. WPTaskScheduler.dll è un componente di Task Scheduler, a partire da Windows 10 1507. Probabilmente si tratta di uno strumento backdoor utilizzato per la persistenza, analizzato da...

SharpMove

SharpMove - .NET authentifizierte Ausführung auf entfernten Hosts Kompilieren Zum Kompilieren öffnen Sie das Visual Studio-Projekt und kompilieren Sie es für die Veröffentlichung. Optionen WMI SCM DCOM Mehrere Taskplaner Dienst-DLL-Hijack DCOM-Server-Hijack Geplanten Task ändern Dienst-Binärpfad...

RedPersist

RedPersist RedPersist é uma ferramenta de Persistência no Windows escrita em C Compilando o Projeto As bibliotecas de terceiros abaixo são utilizadas neste projeto. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Carregue o projeto do Visual Studio e vá em...

exploits

exploits Veröffentlichte PoCs finden Sie unter exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler Informazioni Apache DolphinScheduler è una piattaforma moderna di orchestrazione dei dati che consente lo sviluppo agile e low-code di workflow ad alte prestazioni. È dedicata alla gestione di complesse dipendenze tra attività nelle pipeline di dati e offre un'ampia gamma ...

Quartz-1

Zum Kompilieren: % mvn install -DskipTests Hinweis: a. Das endgültige Quartz-JAR befindet sich unter quartz/target b. Falls Sie nicht über Oracle- und/oder Weblogic-Drittanbieter-Bibliotheken JARs verfügen, die für die Kompilierung erforderlich sind diese können aufgrund von Lizenzbestimmungen...

CVE-2021-21425

CVE-2021-21425 - GravCMS RCE non autenticata Exploit di esecuzione remota di codice non autenticata per GravCMS = 1.10.7 tramite scrittura arbitraria di YAML nello scheduler. Questa è una versione migliorata di EDB-49973. L'exploit originale richiede la modifica manuale dei valori hardcoded nello...

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Quadratischer Denial-of-Service in htmlsanitizeex 1.5.3. Die Bibliothek dient dazu, nicht vertrauenswürdiges HTML zu neutralisieren, doch zwei unabhängige superlineare Codepfade ermöglichen es einer einzigen präparierten Anfrage, einen BEAM-Scheduler für...

persistence-info.github.io

Il repository cerca di raccogliere informazioni sui meccanismi di persistenza di Windows per rendere più efficiente la protezione/rilevamento. La maggior parte delle informazioni è nota da anni e viene attivamente utilizzata in vari scenari. Aspettatevi altro. Faccio del mio meglio per aggiungere...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: ثغرة تصعيد الامتيازات في مجدول مهام Windows نظرة عامة CVE-2024-49039 هي ثغرة تصعيد امتيازات في مجدول مهام Windows EoP تتيح لمهاجم موثّق الهوية الهروب من بيئة AppContainer المعزولة، والارتقاء من مستوى النزاهة المنخفض Low integrity AppContainer إلى مستوى النزاهة المتوسط Medium...

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: use-after-free dello scheduler condiviso di AppleM2ScalerCSCDriver Divulgazione tecnica pubblica per CVE-2026-43655 , un use-after-free di AppleM2ScalerCSCDriver / IOSurfaceAccelerator raggiungibile dal sandbox predefinito delle app iOS senza autorizzazioni speciali. Apple ha...

CVE-2026-74638

A flaw was found in the Linux kernel's drm/v3d driver. This vulnerability arises from concurrent handling of scheduler timeout events across different hardware queues, which share a single global reset mechanism. When a reset occurs in one queue while another is processing a timeout, the...

CVE-2026-74731

In the Linux kernel, the following vulnerability has been resolved: schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs th...

CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74594

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...