160 matches found
CVE-2025-49144
Notepad++ 이진 파일 심기 PoC CVE-2025-49144 ⚠️ 교육 목적으로만 사용 이 코드는 이진 파일 심기 취약점을 이해하기 위한 교육 및 연구 목적으로 설계되었습니다. 적절한 승인을 받은 통제된 환경에서만 사용하세요. 📋 개요 이 개념 증명은 GHSA-9vx8-v79m-6m24에 참조된 Notepad++ 설치 프로그램의 이진 파일 심기 취약점CVE-2025-49144을 시연합니다. 이 취약점으로 인해 공격자는 regsvr32.exe라는 악성 실행 파일을 Notepad++ 설치 프로그램과 동일한 디렉터리에 배치하여...
CVE-2024-36587
CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation 개요 취약점 설명 : dnscrypt-proxy 서비스 설치 시 현재 디렉토리의 실행 파일을 신뢰하여 등록하는 문제로 인해, 악성 바이너리를 삽입해 권한 상승이 가능하다. 취약 버전 : dnscrypt-proxy v2.0.0-alpha9 v2.1.5 PoC 방법 : 바이너리 플랜팅 binary planting 환경 구성 root@kitploit: docker compose up --build 빌드 및 실행이 완료되면 컨테이...
notepad-v8.8.1-LPE-CVE-
notepad-v8.8.1-LPE-CVE- CVE-2025-49144 Notepad++ v8.8.1 SYSTEM-level POC 📌 CVE-2025-49144 是一个高危本地权限提升漏洞，存在于 Notepad++ v8.8.1 及之前版本的安装程序中。该漏洞源于安装过程中不受控制的可执行文件搜索路径行为，允许本地攻击者通过将恶意可执行文件放置在安装程序所在的同一目录中，获得系统级权限。 ⚙️ 漏洞原理 – 逐步说明： 🧱 1. 安装程序出了什么问题？ Notepad++ 安装程序（v8.8.2 之前）调用 regsvr32.exe 注册某些组件，但未提供完整路径（如...
RP_RecordClip_DLL_Hijack
Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 Player アプリケーション（Real Converter の起動時に脆弱性が発現する）と Recording Manager は、存在しない DLL を安全でない方法で検索するため、リモート DLL ハイジャック（バイナリプランティング）の問題に対して脆弱です。 この問題を悪用するには、攻撃者は標的に WebDAV または SMB 共有のメディアファイルを開かせる必要があります。 V.20.1.0.312 より前の Real Player の場合: RAM...
Notepad-8.8.1_CVE-2025-49144
CVE-2025-49144 – Notepad++ 8.8.1 用エクスプロイト このリポジトリには、Notepad++ 8.8.1 インストーラー のCVE-2025-49144 脆弱性を悪用する実用的なProof of Concept（PoC）が含まれています。この悪意のある実行は、脆弱なインストーラーと同じディレクトリにバイナリ（regsvr32.exe）を配置することで発生します。インストーラーが実行されると、コンテキストを継承してペイロードがトリガーされます。 ⚠️ 免責事項 このコードは教育および研究目的...
CVE-2024-55347
CVE 開示: CVE-2024-55347 CVE-2024-55347 の公開開示 🚀 日付: 10-02-2025 概要 Kroll Artifact Parser And Extractor KAPE v1.3.0.2 における Binary Planting の脆弱性により、攻撃者は悪意を持って作成されたバイナリファイルを特定のディレクトリに配置することで、権限を昇格させ、任意のコードを実行できる可能性があります。これにより、不正なシステムアクセスや機密データの侵害につながる可能性があります。 影響を受ける製品 ベンダー : Kape by Eric Zimmerman 製品 ...
CVE-2026-84226
OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...
CVE-2026-84226
OpenVPN versions 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable to a binary planting attack during network configuration steps, exploitable by local authenticated users with low privileges. The CVSS 4.0 score is 8.5 (HIGH) , with high impact to confidentiality, integr...
CVE-2026-63093
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...
CVE-2026-63093 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...
EUVD-2026-45178
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...
CVE-2026-63093
CVE-2026-63093 affects Cursor for Windows 3.2.16. The issue is a binary planting vulnerability: if a malicious file named git.exe is placed in the repository root, Cursor can resolve and execute it during IDE startup and on a recurring cadence, executing with the current user’s privileges. This e...
CVE-2026-63093 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...
PT-2026-60775
Name of the Vulnerable Software and Affected Versions Cursor for Windows version 3.2.16 Description A binary planting issue allows remote attackers to achieve arbitrary code execution. This occurs when a developer clones and opens a crafted repository containing a malicious git.exe file in the ro...
EUVD-2019-7159
Malware in sbrugna...
EUVD-2020-26588
Malware in sbrugna...
EUVD-2020-3056
Malware in sbrugna...
EUVD-2019-15269
Malware in sbrugna...