13319 matches found
Cobaltstrike-RCE-CVE-2022-39197
Cobaltstrike RCE 脆弱性 CVE-2022-39197 の再現 脆弱性の概要 この脆弱性はCobalt StrikeのBeaconソフトウェアに存在し、攻撃者がBeaconの設定に不正な形式のユーザー名を設定することでXSSを誘発し、CSサーバー上でリモートコード実行を引き起こす可能性があります。 スクリーンショット： NTLMv2-SSP Hashの取得（前提：Cobalt StrikeがWindows上で実行されていること） 参考： https://www.freebuf.com/vuls/345522.html...
vsftpd-2.3.4---Backdoor-Command-Execution
vsftpd-2.3.4---Backdoor-Command-Execution vsftpd 2.3.4（CVE-2011-2523）は、Root Shell に到達する重大な脆弱性です。このリポジトリでは、教育目的で、この脆弱性を手動および自動（Python）で段階的に悪用する PoC を紹介します。 この脆弱性はどのようなものか？ まず、これはサービス側のエクスプロイトなので、リモートから悪用します。仕組みはこうです。デフォルトでポート 21 の FTP サービスに : を含むユーザー名で接続すると、システムが TCP ポート 6200 に Root Shell...
CVE-2007-2447
CVE-2007-2447 - username map script 「Samba 3.0.0から3.0.25rc3のsmbdにおけるMS-RPC機能は、リモートの攻撃者がshellメタ文字を使用して任意のコマンドを実行することを可能にします。これは1 SamrChangePassword関数を含み、smb.confオプション「username map script」が有効な場合に発生します。また、リモートの認証済みユーザーが2 リモートプリンタおよび3 ファイル共有管理における他のMS-RPC関数でshellメタ文字を使用してコマンドを実行することも可能にします。」 エクスプロイト...
CVE-2026-8794
CVE-2026-8794 — PaperCut NG 中通过认证时序侧信道进行的用户名枚举 字段| 详情 ---|--- CVE ID| CVE-2026-8794 产品| PaperCut NG 受影响版本| 25.0.11（Build 75758）及更早版本 CWE| CWE-208 — 可观察的时序差异 CVSS 分数| 3.7（低）— 单独使用时；与 CVE-2026-8793 链式利用时升级 研究人员| Vivien LEBAS（@Hazaz） 报告时间| 2026 年 5 月 状态| 已修复 — PaperCut NG 26.0.3 摘要 PaperCut NG...
maigret v0.6.6
Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...
CVE-2025-46047
CVE-2025-46047 Silverpeas = 6.4.2 ユーザー名列挙 PoC Silverpeas バージョン 6.4.1 および 6.4.2 におけるユーザー名列挙の脆弱性を実証するための Proof-of-Concept スクリプト。 脆弱性の詳細 影響を受けるソフトウェア: Silverpeas 影響を受けるバージョン: 6.4.1、6.4.2（およびそれ以前のバージョンの可能性あり） 修正済みバージョン: 6.4.3 脆弱性の種類: 観測可能な応答の不一致によるユーザー名列挙（CWE-204） ベンダートラッキング ID: Silverpeas Bug 14829...
CVE-2026-93532
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...
EUVD-2026-83128
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...
CVE-2026-93532 gedelumbung HospitalManagement Password Change password.php simpan improper authentication
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...
WordPress Yo plugin 1.1-1.3.1 - Unauthenticated SQL Injection via username Parameter vulnerability
Unauthenticated SQL Injection via username Parameter vulnerability discovered by João Ramos Maciel in WordPress Plugin Yo versions 1.1-1.3.1...
CVE-2026-15579
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...
CVE-2026-15579
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...
CVE-2026-15579
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...
EUVD-2026-82861
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...
CVE-2026-15579
Moxa Ethernet switches are affected by an out-of-bounds write vulnerability caused by improper validation of the username field length during Web login processing. A remote, unauthenticated attacker can submit a specially crafted overly long input , triggering a buffer overflow that crashes the a...
CVE-2026-92921
admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attackers with database access can recover plaintext passwords through offline dictionary or brute-force attacks due to negligible computational effort...
CVE-2026-92921
admin3 (versions through 3.0.0 ) stores account passwords using single-round MD5 with only the username as salt and no key derivation function, as seen in its SecurityUtil.java and UserCredential.java source files. Because MD5 is computationally inexpensive, an attacker with database access can r...
CVE-2026-92860
A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. Th...
CVE-2026-92860 rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation
A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. Th...
CVE-2026-92860 rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation
A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. Th...