2272525 matches found
phuip-fpizdam
PHuiP-FPizdaM 这是什么 这是 php-fpm 中一个漏洞（CVE-2019-11043）的利用程序。在某些 nginx + php-fpm 配置下，该漏洞可从外部触发。这意味着如果你的配置存在风险（参见下方），则 Web 用户可能获得代码执行权限。 技术分析 虽然我们懒得写分析文章，但 Orange Tsai 在他的博客中发布了一篇完美的分析。向他致敬。 另外，我在 ZeroNights 2019 的幻灯片在此提供。 什么情况会受影响 如果 Web 服务器运行 nginx + php-fpm，并且 nginx 的配置类似于： root@kitploit: location...
CVE-2020-13942
CVE-2020-13942 Apache Unomi 预认证远程代码执行 CVE-2020-13942 利用 POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200 "filters":"i...
MOODLE-3.X-Remote-Code-Execution
MOODLE-3.X-Remote-Code-Execution cve-2018-1133 ejecución remota de código en Moodle autenticado como profesor...
USN-8752-1 konsole vulnerability
It was discovered that Konsole incorrectly handled certain URLs under specific circumstances. A remote attacker could possibly use this issue to execute arbitrary code...
USN-8752-1: Konsole vulnerability
It was discovered that Konsole incorrectly handled certain URLs under specific circumstances. A remote attacker could possibly use this issue to execute arbitrary code...
GeoServer-CVE-2024-36401
GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401：评估属性名称表达式时的远程代码执行（RCE）漏洞 GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/83.0.4103.116...
StealC-Stealer-RuntimeBroker-Hollowing-C2-Extraction-Payload-Extraction-Analysis
1. RuntimeBroker.exe 进程镂空与 C2 IP 地址 Process Hacker 内存分析显示，StealC Stealer 对 RuntimeBroker.exe 执行进程镂空，并与多个 C2 服务器建立连接。 关键观察： 目标进程： RuntimeBroker.exe（PID 14900）。 C2 IP 地址： http://87.120.196.171/ http://85.251.18/ http://193.148.56.97/ https://51.77.9.121/ Base64 字符串： 多个 Base64 编码字符串（可能是加密的配置数据）。...
tls
ztls QUIC向けにZigで書かれたTLS 1.3 実装で、RFC 8446（TLS 1.3）およびRFC 9001（QUIC-TLS）に厳密に準拠しています。 ステータス 側面| 情報 ---|--- API安定性| 本番 Zigバージョン| 0.16.0 プラットフォーム| Linux, macOS, Windows パフォーマンスに関する注意 2ミリ秒未満のハンドシェイク目標は、Ed25519およびRSA-2048証明書構成で検証されています。secp256r1（P-256）のワークロードは現在、上流のZig...
-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212
创建一个易受 CVE-2023-30212 漏洞影响的 Docker 环境 描述 Docker 环境及利用 CVE-2023-30212 漏洞。CVE-2023-30212 是一个影响 OURPHP 版本低于或等于 7.2.0 的安全漏洞。该漏洞允许跨站脚本（XSS）攻击。 OURPHP sudo apt install docker.io 创建一个 Docker 镜像 docker run -d -p 检查 Docker 镜像 docker ps 获取新的容器 ID bb18debddccc test "docker-php-entrypoi…" 4 minutes ago Up 4...
lua_CVE-2020-24370_AfterPatch
Lua 5.3 README blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Lua 5.3 へようこそ 概要 · インストール · 変更点 · ライセンス · リファレンスマニュアル Luaについて...
super-trouper
Super Trouper 一个用于 Frida 逆向工程工具包的 MCP 服务器。 Super Trouper 通过 STDIO 运行一个 MCP 服务器，将 Frida 的功能作为工具暴露给编码代理。它 可以连接本地、USB 和远程设备；检查应用程序和进程；管理进程会话；以及 加载、执行 JavaScript 插桩脚本并与之交换消息。设备连接、会话和 脚本通过工具本身进行管理，并通过不透明句柄进行引用。 super-trouper 安装 Homebrew 通过项目的 Homebrew tap 安装 macOS 版本： root@kitploit: brew install --cas...
Exploit for CVE-2026-38526
Nexus — Local Privilege Escalation PoC Gitea template-sync...
Security Bulletin: IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (CVE-2026-12355)
Summary IBM MQ has addressed a bypass of the JNDI name sanitization in the Resource Adapter IVT servlet that could allow an unauthenticated remote attacker to supply a malicious JNDI URL and execute arbitrary code on the hosting application server if the IVT EAR is deployed Vulnerability Details...
Security Bulletin: IBM MQ is vulnerable to unauthenticated remote code execution (CVE-2026-10747)
Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's protocol handling that could allow an unauthenticated remote attacker with network access to the listener port to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10747 DESCRIPTION: IBM MQ could...
Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-10858)
Summary IBM MQ has addressed a heap buffer underflow vulnerability in the queue manager's protocol handling that could allow a remote authenticated attacker to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a...
Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11716)
Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's cluster migration message handler Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during...
Security Bulletin: IBM MQ client is vulnerable to remote code execution (CVE-2026-11727)
Summary IBM MQ has addressed a heap buffer overflow vulnerability in the MQ client's MQOPEN reply handler that could allow a rogue queue manager or man-in-the-middle attacker on an unencrypted channel to execute arbitrary code on a connecting client Vulnerability Details CVEID:CVE-2026-11727...
SOC-Analyst-Portfolio
🛡️ Allen Ace SOC Analyst | Threat Hunter | Detection Engineer Detect • Investigate • Respond • Defend Welcome This portfolio documents my hands-on cybersecurity journey through practical investigations, enterprise lab environments, detection engineering, digital forensics, malware analysis, threat...
USN-8563-5: nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...
USN-8563-5 A security issue was fixed in nginx.
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...