cve-2022-31705

CVE-2022-31705 소개 https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Windows VMware Workstation 16.2.0에서 테스트, 게스트 OS는 Ubuntu Server 22 게스트 머신에 USB 장치가 하나 이상 연결되어 있어야 함 ehci.c 코드에서 'qh-field4' 변경 'sudo ./run.sh'를 입력하여 poc를 컴파일하고 실행 예제...

securix

SécurixOS: Base OS pour poste sécurisé !NOTE Ce projet est en alpha , aucun support n'est proposé pour l'heure. Objectifs SécurixOS est une distribution NixOS développée par la DINUM pour équiper des ordinateurs sécurisés pour l'administration système, la bureautique et le développement afin de...

dockernymous

FAITES DÉFILER POUR LES EXIGENCES ET INSTRUCTIONS ÇA NE MARCHERA PAS SI VOUS NE LES SUIVEZ PAS Avertissement : Dockernymous est dans un état de développement très précoce. Utilisez-le uniquement à des fins éducatives. NE l'utilisez PAS si vous comptez sur un anonymat fort ! Actualités 13.10.2018...

sift

SIFT Ceci est un dépôt de métadonnées principalement utilisé pour les discussions et le suivi des problèmes. cast -- CLI d'installation saltstack -- les états qui font réellement le travail packer -- construit des images machines à l'aide des outils ci-dessus package-scripts -- construit...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

CVE-2023-21817

CVE-2023-21817 — средство проверки уязвимости Windows Kerberos LPE Минималистичный C++ Proof of Concept PoC / средство проверки уязвимости для CVE-2023-21817. Эта утилита помогает исследователям безопасности и системным администраторам определить, уязвима ли система Windows к ошибке локального...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

network-security-lab

🔬 Laboratoire de Sécurité Réseau Un environnement virtuel contrôlé simulant des scénarios d'attaque et de défense réels 📋 Aperçu Ce laboratoire simule un test d'intrusion réel et un exercice de durcissement défensif dans un environnement virtuel totalement isolé. Il démontre le cycle de vie compl...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

metasploitable-penetration-testing-lab

🔐 Лаборатория по тестированию на проникновение Metasploitable 2 Контролируемый проект лаборатории кибербезопасности, демонстрирующий обнаружение уязвимостей, эксплуатацию, проверку пост-эксплуатации и защитные меры в изолированной виртуальной среде. 📌 Обзор проекта Данный проект моделирует реальн...

vmware-exploitation

Exploitation de VMware Une collection de liens liés aux exploits d'évasion de VMware. Les pull requests sont les bienvenues. Suivez @andreyknvl sur Twitter ou @[email protected] sur Mastodon pour être notifié des mises à jour. Recherche 2024 "Enchaîner les N-days pour tout compromettre" :...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-19501

CVE-2026-19501 is a CSV injection vulnerability in the Brainstorm Force SureForms WordPress plugin (versions ≤ 2.12.1). The CSV export functionality fails to sanitize spreadsheet formula characters in user-controlled form field names, allowing a remote attacker to inject formulas that execute on ...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

EUVD-2026-60962

CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-13433 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 ACS is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation...

PT-2026-71324

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 ACS is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation...

CVE-2026-48161

CVE-2026-48161 affects react18-use (a React 19 use hook shim). Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits that added src/install.js and wired it into postinstall, which fetched a JavaScript payload from an attacker-controlled HTTPS endpoint...

CVE-2026-48161 react18-use was vulnerable to malicious code execution via compromised commits

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machine...

CVE-2026-48160

react-tracked provides state usage tracking with Proxies. Between 2026-05-18 19:26:36 and 2026-05-19 15:22:45, the default branch contained malicious commits 6978272a7d6ca02225cb747ea69f427512e33699 through 949f1a3d6bb1ff7d1a0dec892afd773e742627e8 that executed remote attacker-controlled code on...