ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 익스플로잇 래퍼 MS09-050 CVE-2009-3103 익스플로잇을 위한 한 줄 설정. 번거로움 없이, 디버깅 없이, 그냥 작동합니다. 왜? 돌아다니는 대부분의 MS09-050 스크립트는 수동 셸코드 주입이 필요하고, 핸들러와 타이밍 문제가 있거나, 그냥 작동하지 않습니다. 이 래퍼는: 올바른 매개변수로 셸코드 생성 익스플로잇 자동 빌드 바로 사용 가능한 Metasploit 핸들러 생성 정확히 무엇을 실행해야 하는지 안내 시간이 중요한 OSCP 준비를 위해 제작되었습니다. 대상 취약점 :...

globalprotect-ca-cert-ipc

c2us.exe - 로그온한 사용자의 데스크톱 세션에서 실행 중인 사용자로 명령을 실행합니다. 이 경우 권한이 없는 사용자의 데스크톱 세션에서 cmd.exe를 SYSTEM으로 실행합니다. c2us.c - c2us.exe의 소스 코드. epinject.exe - 새 프로세스를 생성하고 해당 엔트리 포인트에 코드를 주입하는 데 사용되는 엔트리 포인트 인젝터입니다. loadgpsend.bin - epinject.exe를 사용하여 PanGPA.exe에 주입되는 페이로드로, 메인 익스플로잇 본체인...

CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

EUVD-2026-86482

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

CVE-2026-85082 Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Vulnerability Welcome back everyone !!! The exploit is a race condition, so it's a hit or miss. I have managed to get a 100% success rate on some machines while it struggled to work on others. The exploit has been tested in Windows 11 Official channel +...

CVE-2026-62182

The KubeEdge system is vulnerable to command injection in the ConfigUpdateJob processing logic located in edge/pkg/taskmanager/actions/configupdatejob.go. The root cause is the concatenation of authenticated user-controlled updateFields values into a command string, which is then executed via a s...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus ゼロデイ権限昇格の脆弱性 アンチマルウェアベンダーにおけるもう一つのゼロデイ脆弱性です。確信はありませんが、この脆弱性は他のGenDigital製品（AVG、Nortonなど）にも影響する可能性があると考えています。 現時点では、PoCはAvast Antivirusの任意のバージョンと互換性があります。 このPoCは、Avast Sandboxの脆弱性を悪用してSAMデータベースをダンプし、完全なSYSTEMシェルを起動します。本稿執筆時点では、このPoCは完全にパッチ適用済みのAvast Antiviru...

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2026-62735 Information - This vulnerability was ori...

Windows-AppResolver-LPE-PoC

Windows AppResolver LPE PoC Proof of concept for an AppResolv...

Exploit for CVE-2026-50454

CVE-2026-50454 SYSTEM Shell PoC Proof of concept for CVE-2026...

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The anonymous security researcher going by the name Chaotic Eclipse aka Nightmare-Eclipse has released a proof-of-concept PoC exploit for yet another Microsoft Defender zero-day named RoguePlanet. "The exploit is a race condition, so it's a hit or miss," the researcher, who published the exploit...

CVE-2018-25310: Cross-Site Request Forgery (CSRF)

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can...

CVE-2026-41411

Vim (before version 9.2.0357) contains a local command-injection vulnerability in tag file processing. When resolving a tag, Vim passes the filename field from the tags file through wildcard expansion, enabling backtick syntax (e.g., command) that can execute arbitrary commands via the system she...

PT-2026-35033

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0357 Description Command injection occurs during tag file processing. When resolving a tag, the filename field from the tags file undergoes wildcard expansion to resolve environment variables and wildcards. If this...