CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut CVE-2024-24576 취약점 "BatBadBut"에 대한 PoC 정보 스크립트를 실행하면 인수를 요청하며, 해당 인수는 배치 파일에 전달됩니다. 인수를 "로 닫고 그 뒤에 &를 붙이면 모든 Windows 명령어를 실행할 수 있습니다. 예를 들어: helloworld" & whoami 결과적으로 whoami 명령의 출력을 얻을 수 있습니다. 물론 실제 환경에서는 이렇게 보이지 않을 것입니다. 이는 해당 CVE에 대한 PoC일 뿐입니다. 사용법 저장소를 클론합니다: git...

Pentest-Command

프로젝트 배경 침투 테스트 과정에서 우리는 MSF, CS, Empire, Impacket 등 다양한 프레임워크를 사용하게 됩니다. 이 프로젝트의 주요 목적은 후침투 테스트 단계에서 자주 사용되는 명령어를 정리하는 것입니다. 기초 지식 WIN 디렉터리 소개 a. 부팅 시 시작 프로그램 디렉터리c C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、부팅 시 자동 실행 프로그램이 기능은 권한 유지에 자주 사용됨c...

CVE-2026-59856

Vim (opensource editor) vulnerability CVE-2026-59856 affects versions prior to 9.2.0736. The PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class/trait name from the edited buffer into a search() pattern executed by win_execute() without escaping. If the name contai...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, and MDM operations. Versions of Fleet prior to 4.81.1 contained security...

React Native Community CLI OS Command Injection Vulnerability

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute...

CVE-2020-36904 Selea CarPlateServer 4.0.1.6 Remote Program Execution via Configuration Endpoint

Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrary Windows binaries by manipulating the NOLISTEXEPATH configuration parameter. Attackers can bypass authentication through the /cps/ endpoint and modify server configuration,...

Exploit for CVE-2025-55182

Research: All versions of CVE-2025-55182 exploit vulnerabiliti...

EUVD-2025-37505

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

Command Injection

youtubedlsharp is vulnerable to Command Injection. The vulnerability is due to unsafe argument conversion where the UseWindowsEncodingWorkaround being enabled by default, allowing malicious commands to be injected when starting yt-dlp on Windows...

CVE-2021-34426 Arbitrary command execution in Keybase Client for Windows

A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user's Git repository could leverage this vulnerability to...

Vulnerabilities fixed in Nessus

Vulnerabilities have been fixed in Nessus. The vulnerabilities allow a locally authenticated malicious person with administrator privileges to obtain elevated privileges. The malicious party can use these privileges to execute specific Windows commands execute as the Nessus Agent host. Tenable ha...

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

CVE-2019-3980 This repo was created to utilize the Nessus POC...

LAN.FS Messenger 2.4 Command Execution

Title: ====== LAN.FS Messenger v2.4 - Command Execution Vulnerability Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 760 Common Vulnerability Scoring System: ==================================== 8.2 Introduction: =============...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Document Title: =============== LAN.FS Messenger v2.4 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=760 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 760...