sh00t

root@kitploit: 面向手动安全测试人员的测试环境 Sh00t 是一个任务管理器，让你专注于执行安全测试 提供待办 清单形式的测试用例 通过可定制的漏洞模板帮助创建漏洞报告 功能特性： 动态任务管理器，取代那些并非为安全测试设计的简单编辑器或任务管理工具 自动化、可定制的安全测试用例清单，取代 Evernote、OneNote 等并非为安全测试设计的工具 管理用于不同目的的定制漏洞模板，并自动生成漏洞报告 支持多个评估与项目，逻辑上区分你的不同需求 像使用纸张一样——所有内容自动保存 将自动生成的漏洞报告导出为 Markdown 并直接提交到 HackerOne！（开发中） 与...

ring3-kit

ring3-kit 使用 NT Hook NtQuerySystemInformation 从任务管理器隐藏进程。一个简单的 Ring-3（用户态）rootkit。 如何实现 使用我们自己的函数 Hook API 函数 NtQuerySystemInformation，该函数从任务管理器隐藏进程 被 Hook 的函数会被调用替代原函数 DLL 被注入到 Taskmgr.exe，以便有虚拟内存空间来执行我们的 Hook 代码 免责声明 开发者 Josh Schiavone 不对本简单 rootkit 的误用负责。请勿将此 rootkit...

CVE-2024-24386

VitalPBX - CVE-2024-24386 漏洞标题：命令注入 作者：Erick Duarte 版本： 3.2.5-2 该漏洞出现在使用任务管理器模块结合Cron Profile时。要利用此漏洞，我们需要在操作系统中的特定文件夹中放置一个脚本。该文件夹为"/var/lib/vitalpbx/scripts"。 出于好奇，我开始使用Burp分析发送到服务器的内容。为此，我创建了一个Cron Profile，使其每分钟执行一次。 接下来，我继续创建任务管理器。...

TaskManager-Button-Disabler

TaskManager-Button-Disabler 禁用/重命名任务管理器按钮的简单方法。 安装 root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build 功能特性 重命名终止进程按钮 禁用终止进程按钮 适用于任务管理器、ProcessHacker等 实际效果...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption through specific user interactions...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption through a crafted HTML page...

June 23, 2026—KB5095091 (OS Build 28000.2340) Preview

None None...

EUVD-2026-19115

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585

Summary of CVE-2026-5585 : Tencent AI-Infra-Guard 4.0 contains a vulnerability in the Task Detail Endpoint, specifically an unknown function within the file common/websocket/task_manager.go. Manipulation of this element results in information disclosure. The attack may be initiated remotely and, ...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

AI-Infra-Guard 访问控制错误漏洞

AI-Infra-Guard is an open-source AI security risk detection and red-team testing platform developed by Tencent. Version 4.0 of AI-Infra-Guard contains a access control vulnerability, which stems from incorrect handling of the file common/websocket/taskmanager.go, potentially leading to informatio...

CVE-2026-2351

The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callbackgettextfromurl function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on th...

CVE-2026-4004

The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2. This is due to missing capability checks in the callbacksearch function and insufficient input validation that allows shortcode syntax...

WordPress Task Manager plugin <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution via 'taskid' Parameter vulnerability discovered by theviper17y in WordPress Plugin Task Manager versions = 3.0.2...