895 matches found
betwixt
Betwixt는 친숙한 Chrome DevTools 인터페이스를 사용하여 브라우저 외부의 웹 트래픽을 분석하는 데 도움을 줍니다. 설치하기 사용 중인 운영 체제에 맞는 최신 릴리스를 다운로드하거나, 직접 번들을 빌드하거나, 소스 코드에서 Betwixt를 실행하세요. 설정하기 트래픽을 캡처하려면 Betwixt가 백그라운드에서 생성한 프록시http://localhost:8008로 트래픽을 보내야 합니다. 시스템 전체 트래픽을 분석하려면: macOS - 시스템 환경설정 → 네트워크 → 고급 → 프록시 → 웹 프록시HTTP Windo...
SirepRAT
SirepRAT - Windows IoT Core 上で SYSTEM として RCE SirepRAT は、ターゲットに実際の RAT マルウェアを作成する必要なく、完全な RAT 機能を提供します。 背景 この方法は、Microsoft のサイトで提供されている公式イメージに組み込まれ、実行されている Sirep Test Service を悪用するものです。このサービスは、IoT デバイス上でドライバー/ハードウェアテストを実行するために構築できる HLK セットアップのクライアント部分です。Sirep/WPCon/TShell プロトコルを提供します。 私たちは...
CVE-2026-23520
CVE-2026-23520 MCP API リモートコマンド実行（RCE）PoC 📌 概要 このリポジトリには、脆弱なMCP APIエンドポイント（一般的には /api/mcp/connect）を公開するアプリケーションに影響を与えるリモートコマンド実行（RCE）脆弱性のProof-of-Concept（PoC）エクスプロイトが含まれています。 この脆弱性により、細工されたAPIリクエストを介してシステムレベルのコマンドを実行できます。 🚀 クイックスタート 1. リスナーを起動する root@kitploit: nc -lvnp ATTACKERPORT 2...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer 🔒 セキュリティ研究に関する声明 本プロジェクトはセキュリティ研究および教育目的でのみ使用されます。本ツールを使用した未承認のテストは違法です。著者は一切の悪用や損害について責任を負いません。 📋 概要 CVE-2024-31317 は、Android 9 から Android 13 のデバイスに影響を与える深刻なセキュリティ脆弱性であり、WRITESECURESETTINGS 権限を持つアプリケーションがコマンドインジェクションを通じてシステムレベルの権限実行を取得できるようにします。...
Enumprotections_BOF
Enumprotections BOF このBOFは、システムプロセスを列挙し、それぞれの保護レベルを特定するために使用できます。サービス関連、ユーザー、セッション、パスなどの追加情報も返されます。これらの情報を組み合わせることで、SYSTEMレベルのDLLハイジャックを調査するための有力な候補を特定できます。理想的なプロセスは次のとおりです。 1. 保護されていない 2. サービスに関連付けられているため、開始/停止が可能 3. サードパーティ製ソフトウェア。MicrosoftはMicrosoftコンポーネントのハイジャック検出に長けています。 使用方法 コンパイル...
CVE-2026-92253 Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration
Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...
CVE-2026-78604: Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
PT-2026-84741
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2026-76350
CVE-2026-76350 is an improper privilege management vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . A user holding the schedule_search role capability can configure PDF attachments in the email alert action workflow. When the alert fires, the search...
CVE-2026-76350 Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...
CVE-2026-76350: Improper Privilege Management
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...
CVE-2026-76391: Incorrect Authorization
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run History. The improp...
CVE-2026-76351: Server-Side Request Forgery (SSRF)
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use crafted report notification data to cause Splunk Secure Gateway to send a request to...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-18759
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
EUVD-2026-52064
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...
PT-2026-70737
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions prior to August 2026 Description A use-after-free condition exists in the Windows Ancillary Function Driver for WinSock afd.sys. This issue occurs due to unreliable pointer dereferencing within the Windows...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-15684 Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability
Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...
