201 matches found
SSCMS-PluginShell
VisualStudio 설치 2. 이 프로젝트 가져오기 3. Startup.cs 파일에서 IPAddress.Parse 값 수정 using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using System.Text; using System.Net.Sockets;...
BlueBorn
BlueBorn CVE-2017-0785 Archlinux 설치 paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn 튜토리얼 장치 검색 hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 익스플로잇 사용 python CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX V Exploit: Done! python...
BetterBackdoor
BetterBackdoor 백도어는 원격으로 시스템에 접근하기 위해 사용되는 도구입니다. 일반적으로 NetCat과 같은 백도어 유틸리티는 두 가지 주요 기능을 가지고 있습니다: 원격 입력을 cmd 또는 bash로 파이프하고 응답을 출력하는 것입니다. 이는 유용하지만 한계가 있습니다. BetterBackdoor는 키 입력 주입, 스크린샷 캡처, 파일 전송 등 다양한 작업을 포함하여 이러한 한계를 극복합니다. 기능 BetterBackdoor는 백도어를 생성하고 제어할 수 있습니다. 이 생성된 백도어는 다음을 수행할 수 있습니다: ...
CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-17350
Summary: CVE-2026-17350 affects pgAdmin 4 in SERVER mode (9.3–9.17). The per-tool permission system did not consistently enforce tool-level permissions; only the front-door route used a permissions_required decorator, while other backend routes and Socket.IO handlers relied on authentication chec...
dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
PYSEC-2026-2697 Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access Affected Component Socket.IO session state and role-check callsites: - backend/openwebui/socket/main.py lines 330-351, connect handler — role snapshotted into SESSIONPOOL - backend/openwebui/socket/main.py lin...
MAL-2026-4400 Malicious code in @kmmao/happy-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4478b22a21a87a37250e86ef25639330f79b779e5793f642eaf7ddaafd975d4 This package is a near-verbatim fork of the upstream happy-coder/happy-cli references to slopus/happy-cli and happy.engineering are retained througho...
CVE-2026-42095
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-42095: Missing Authentication for Critical Function
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-42095
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-25947
Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocatio...
EUVD-2003-0785
Malware in sbrugna...
EUVD-2018-20388
Malware in sbrugna...
EUVD-2020-12556
Malware in sbrugna...
EUVD-2007-1537
Malware in sbrugna...
EUVD-2022-35332
Malicious code in bioql PyPI...
EUVD-2022-54755
Malicious code in bioql PyPI...