Exploit for Path Traversal in Grafana

\ Replication of Lab and Security Analysis: CVE-2021-43798...

CVE-2025-24813-PoC

CVE-2025-24813-PoC CVE-2025-24813은 Apache Tomcat에 영향을 미칩니다. 취약한 버전이고 매우 잘못 구성된 경우, 공격자는 GET 1회와 POST 1회만으로 RCE원격 코드 실행를 달성할 수 있습니다. 자세한 정보는 여기에서 확인하세요. 이 스크립트는 최근 writeup에서 공개된 Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng의 스크립트를 수정하여, 명령어를 입력받고 모든 ysoserial 가젯 페이로드를 생성해 대상에 전송할 수 있게 한 것입니다...

CVE-2026-101043

A flaw was found in pnpm. This vulnerability can lead to information disclosure because proxy settings defined in workspace configuration files expand environment variable placeholders without proper restrictions. An attacker who convinces a user or automated system to run a command within a...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

AntimalwareBlight

Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...

follina.py

'Follina' MS-MSDT n-day Microsoft Office RCE 'Follina' Office RCE 취약점을 로컬 테스트 목적으로 재현하기 위한 간단한 POC입니다. 스크립트를 실행하면 현재 작업 디렉터리에 clickme.docx또는 clickme.rtf 페이로드 파일이 생성되고, 페이로드 파일www/exploit.html이 포함된 웹 서버가 시작됩니다. 페이로드 및 웹 서버 매개변수는 구성 가능합니다도움말 및 예시 참조. ⚠ 프로덕션 환경에서 사용하지 마시오. 그러지 않으면 바보로 간주될 것입니다. 사용법:...

CVE-2025-66478-PoC-Reverse-Shell

CVE-2025-66478 / CVE-2025-55182 "React2Shell" — RSC Server Actions 역직렬화 RCE PoC CVE-2025-55182 에 대한 개념 증명 익스플로잇 — 공개적으로 "React2Shell" 이라는 별명으로 알려진, React Server Components의 Server Actions 역직렬화react-server-dom-webpack / -parcel / -turbopack에서 발생하는 서버 측 프로토타입 오염 취약점입니다. Next.js는 이 취약점을 CVE-2025-664...

KrbRelayUp

KrbRelayUp Rubeus와 KrbRelay의 일부 기능및 감사의 글 섹션에 언급된 몇 가지 다른 도구들을 감싸는 간단한 래퍼로, 다음 공격 프리미티브의 악용을 간소화하기 위한 것입니다: 0. 선택 사항 새 컴퓨터 계정 생성 New-MachineAccount 1. 로컬 컴퓨터 계정 인증 강제 KrbRelay 2. LDAP로의 Kerberos 릴레이 KrbRelay 3. RBCD 권한을 추가하고 로컬 컴퓨터에 대한 권한 있는 ST를 획득 Rubeus 4. 해당 ST를 사용하여 로컬 서비스 관리자에 인증하고 NT/SYSTEM...

wptsextensions.dll

작업 스케줄러 DLL 하이재킹 악용을 위한 WptsExtensions.dll "수정 안 됨" x64 Visual Studio 환경 변수 로드: "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" TCHAR script 변수를 DLL이 검색될 쓰기 가능한 SYSTEM 경로로 업데이트하세요. 이 도구를 확인하여 그러한 경로들을 찾으세요. 다음 명령으로 이 환경 변수를 나열할 수도 있습니다: powershell -c...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE 익스플로잇 테스트 지원: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 원래 exp는 XP, 2003을 지원하지 않았으며, 현재 코드는 원래 코드를 기반으로 이 두 시스템에 대한 지원을 추가했습니다. 사용법 CVE-2018-8120 exploit by...

CVE-2025-32463

많이 영향을 받고, 복사되고, 기반이 된 형식은 pr0v3rbs 의 유사한 저장소https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git의 형식을 따릅니다. 이것은 빠르고 단일 소스 전달, 실행 및 정리를 위한 C 재구현입니다. CVE-2025-32463 – sudo chroot"chwoot" PoC 이 저장소는 sudo의 chroot 기능에서 CVE‑2025‑32463 권한 상승 결함을 입증하기 위한 최소한의 재현 가능 환경을 제공합니다. 이 취약점은 Stratascale의 Rich...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047

Fleet versions before 4.87.0 are vulnerable to an unauthenticated download of in-house iOS application packages and manifests. The root cause is the failure to implement intended random, time-limited URL tokens for specific endpoints required by Apple's InstallEnterpriseApplication MDM command. A...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

EUVD-2026-87978

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are vulnerable to OS command injection due to insufficient escaping of Homebrew cask metadata . In manifests generated before 2026-08-19 , certain interpolation sites failed to escape shell metacharacters (e.g., $(...)), allowing an att...

EUVD-2026-87976

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...