223489 matches found
CVE-2023-38831
Place the bait file and evil script file in the current directory, the bait file is recommended to be an image .png, jpg or a document .pdf 2. Run python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar to generate your exploit...
CVE-2020-1337
CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...
PrintNightmare-CVE-2021-34527
PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability CVE-2021-34527, CVE-2021-1675 Summary This is a remote code execution vulnerability that can be used to obtain SYSTEM level privileges by an authenticated remote user against Windows machines running the print spooler service. An attack...
CVE-2026-19590
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...
CVE-2019-16724
취약점 설명 File Sharing Wizard 1.5.0은 HTTP POST 매개변수에서 SEH구조적 예외 처리기 기반 버퍼 오버플로를 악용하여 원격 공격자가 임의 코드 실행을 얻을 수 있게 합니다. 이 익스플로잇은 Windows 7 Home에서 테스트되었습니다. 다른 플랫폼에서는 확실히 작동이 깨질 것입니다. 주로 연구 목적입니다...
CVE-2021-31166-detection-rules
CVE-2021-31166 Detection Rules Different rules to detect if CVE-2021-31166 is being exploited Rules available: Suricata Snort The snort rules also work on suricata. Zeek To Do: Make PCAPs available which where used during the development of the signatures Zeek script Detection when the...
Microsoft-2024-December-Update-Control
Windows 2024년 12월 보안 패치 감사 스크립트 이 PowerShell 스크립트는 2024년 12월 Microsoft 보안 게시판에서 발표된 특정 취약점CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, CVE-2024-49122에 필요한 KB 업데이트가 시스템에 설치되어 있는지 확인합니다. 스크립트는 운영 체제 버전을 감지하여 어떤 패치를 적용해야 하는지 확인하고, 먼저 감지된 운영 체제를 화면에 출력합니다. 기능 CVE 확인: 다음 CVE에 대한 관련 KB 업데이트를 확인합니다:...
CVE-2021-25253
root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Trend Micro OfficeScan Client: 버전 10.0 이하에서는 OfficeScan 클라이언트 폴더에 잘못된 ACL 권한이 있어 공격자가 서비스를 ...
CVE-2025-12768
creationtimestamp| type| source ---|---|--- 2026-09-01 18:00:09+00:00| seen| https://bsky.app/profile/windowsforum.com/post/3muhysaq4j625 2026-09-01 20:15:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muiadpcugc2w 2026-09-02 12:45:05+00:00| seen|...
CVE-2023-31747
root@kitploit: Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: 12.2.9.2233 이하 버전에는 따옴표로 묶이지 않은 서비스 경로가 포함되어 있어, 공격...
CVE-2023-3519
CVE-2023-3519 Because you can run powershell on ur mum's PC without having to install NMAP or PYTHON or tell anyone you run ARCH! ; x...
CVE-2022-26485
CVE-2022-26485 Tested against Firefox 78.0 Windows https://ftp.mozilla.org/pub/firefox/releases/78.0/win64/en-US/Firefox%20Setup%2078.0.exe...
CVE-2022-1802
CVE-2022-1802 + CVE-2022-1529 + CVE-2022-2200 Firefox 100.0.1 Windows에서 테스트됨 https://ftp.mozilla.org/pub/firefox/releases/100.0.1/win64/en-US/Firefox%20Setup%20100.0.1.exe...
NullGate
NullGate このプロジェクトは、間接システムコールを使用してNTAPI関数を快適かつ現代的に利用する方法を実装しており、動的なシステムコール番号の取得には FreshyCalls メソッドを少しひねった形で組み合わせています。 また、Windows Defender のメモリスキャンを回避するために、これまで言及されているのを見たことがないテクニックも使用しています。 このプロジェクトは、このライブラリを使用した古典的なPoCプロセスインジェクタを実装しています。 便利な暗号化関数も利用できます。 Demo Build サンプルをビルドするには...
ACEshark
ACEshark What is it? ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need for tools like accesschk.exe or other non-native binaries. Why? Efficiently identify and analyze service permissions to uncover...
windows-api-function-cheatsheets
Windows API 関数チートシート 連絡先 🌨️ Snowcrash: [email protected] 目次 Windows API 関数チートシート ファイル操作 プロセス管理 メモリ管理 スレッド管理 ダイナミックリンクライブラリ DLL 管理 同期 プロセス間通信 Windows フック 暗号化 デバッグ Winsock レジストリ操作 エラー処理 リソース管理 Unicode 文字列関数 文字列長 文字列コピー 文字列連結 文字列比較 文字列検索 文字分類と変換 Win32 構造体チートシート 一般的な構造体 Win32 ソケット構造体チートシート...
WindowsRootkitsGuide
このリポジトリには README がありません。...
CVE-2024-44193
Hacking Windows through iTunes - Local Privilege Escalation 0-day Introducing CVE-2024–44193 This is a write up on CVE-2024–44193 which is a Local Privilege Escalation exploit in iTunes version 12.13.2.3. It was patched September 12, 2024 by Apple. Link to Apple's Security Advisory: Apple's...
CVE-2020-1337-exploit
CVE-2020-1337 Windows Privilege Escalation this is a WWWwrite-what-where exploit credit Junyu Zhou @md5salt, who told me there could be a new bug. Wenxu Wu @ma7h1as, I find the bug and write this exploit. how it works in the patch of CVE-2020-1048, Microsoft add the validation code of portname on...