26 matches found
WAS
WAS WAS - Wait A Sec : 보안에 민감한 사용자를 위한 자동 USB 드라이브 멀웨어 스캐닝 도구. 저자: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 USB 드라이브를 꽂고 멀웨어 검사 없이 파일을 더블 클릭한 적이 얼마나 많습니까? 아마도, 많을 것입니다. 잠깐만 기다려요! 보안 전문가라도 종종 서두르거나 정신이 없어 USB 드라이브를 신뢰하게 됩니다. 그리고 컴퓨터도 마찬가지입니다. 무슨 문제가 생길 수 있을까요? 단 한 번의 클릭으로 해킹당할 수 있습니다...
CVE-2026-59933
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the OLE reader follows sector chains from attacker-controlled XLS/OLE...
PT-2026-63656
Name of the Vulnerable Software and Affected Versions PhpSpreadsheet affected versions not specified Description The OLE reader in PhpSpreadsheet follows sector chains from XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A malformed file can set the small-block depo...
Exploit for Allocation of Resources Without Limits or Throttling in Espressif Esp-Idf
CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wr...
CVE-2025-70220
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWANwizard4...
Exploit for CVE-2025-8723
⚡️ Cloudflare Image Resizing Description: The plugin'...
ROSA: Finding Backdoors with Fuzzing
A code-level backdoor is a hidden access, programmed and concealed within the code of a program. For instance, hard-coded credentials planted in the code of a file server application would enable maliciously logging into all deployed instances of this application. Confirmed software supply chain...
Microsoft Windows Defender Antimalware Platform DoS Vulnerability (Dec 2023)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-12-2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Exploit for Argument Injection in Atlassian Bitbucket
Original Project https://github.com/BenHays142/CVE-2022-3680...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...
Girsh - Automatically Spawn A Reverse Shell Fully Interactive
Who didn't get bored of manually typing the few lines to upgrade a reverse shell to a full interactive reverse shell tty spawn, stty size ..., stty raw -echo or typing the command to use ConPTY. Description With Girsh, just run it and it will detect the OS and execute the correct commands to...
XSSTRON - Electron JS Browser To Find XSS Vulnerabilities Automatically
Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation Become root sudo su Install Node.js and npm https://www.npmjs.com/get-npm or sudo apt install npm Download this repo files or gi...
Microsoft Defender Antimalware Platform Multiple EoP Vulnerabilities (Jun 2020)
This host is missing an important security update according to Microsoft Security Updates released for Microsoft Defender Antimalware Platform dated 9th June 2020 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Microsoft Defender DoS Vulnerability (Sep 2019)
This host is missing an important security update according to Microsoft Security Updates released for Microsoft Malware Protection Engine dated 23-09-2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Microsoft Security Essentials RCE Vulnerability (Apr 2018)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Malware Protection Engine MPE dated 03-04-2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Dr. Mine - Tool To Aid Automatic Detection Of In-Browser Cryptojacking
Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking. The most accurate way to detect things that happen in a browser is via browser itself. Thus, Dr. Mine uses puppeteer to automate browser thingy and catches any requests to online cryptominers. When a request...
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...
Microsoft Malware Protection Engine Denial of Service Vulnerability
A denial of service vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to a scan timeout. An attacker who successfully exploited this vulnerability could prevent the Microsoft Malware Protection Engine from monitoring affecte...
Microsoft Malware Protection Engine Denial of Service Vulnerability
A denial of service vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to a scan timeout. An attacker who successfully exploited this vulnerability could prevent the Microsoft Malware Protection Engine from monitoring affecte...
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...