CrafterCMS-CVE-2025-6384

CrafterCMS 认证后的RCE - Groovy沙箱绕过 CVE-2025-6384 这是针对 CrafterCMS 中认证后远程代码执行漏洞的概念验证。 漏洞概要 拥有开发者权限的认证用户可以绕过 Crafter Studio 中的 Groovy 脚本沙箱，实现远程代码执行（RCE）。该沙箱未能阻止实例化新的 GroovyShell，而后者可用于创建新的、无限制的执行环境。 产品: CrafterCMS 组件: Crafter Studio 漏洞: 通过 Groovy 沙箱绕过实现认证后RCE CWE-913 影响: 服务器完全沦陷 实验环境搭建/部署 你可以使用官方 Docke...

investigations

调查 本仓库包含从国际特赦组织针对人权捍卫者遭受定向威胁的部分技术调查中提取的危害指标。 这些指标根据 CC-BY 许可协议共享。...

public-research

Nokia Deepfield ERT — 公开研究 来自诺基亚Deepfield应急响应团队（ERT）的威胁研究，专注于DDoS僵尸网络及相关基础设施。每个目录涵盖一个僵尸网络家族，附有简要总结和机器可读的入侵指标（IoCs）。 本仓库整合了先前的社区研究与Deepfield ERT的原创分析。具体参考信息和归属请参见各README文件。 注意： 指标以原始（非去毒化）形式提供，以便检测工具直接使用。处理URL和域名时请谨慎。 部分指标包含威胁行为者出于品牌或反分析目的而选择的攻击性或粗俗语言。这些内容按原样复现，以利于检测和归因。 目录 目录| 描述 ---|--- aisuru|...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects “LABCAT Processing Projects 中存在危险类型文件无限制上传漏洞，攻击者可将 Web Shell 上传至服务器，从而导致完全失陷。” 🧑‍💻 利用说明 此 Python 利用脚本针对使用存在漏洞的 Processing Projects 插件（版本 = 1.0.2）的 WordPress 站点。该插件未能正确处理来自已认证用户的文件上传，允许其上传包含可执行 PHP 代码（Web Shell）的任意 ZIP 文件。 利用脚本： 1. 以管理员身份登录目标 WordPress...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the IAM Proxy component of the Identity & Access Management tool for managing access to information resources allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the “REDAAM” IT-infrastructure centralized management system, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

The vulnerability of the Test IT testing management system, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FOQUZ platform, related to the incorrect duration of a session, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on the name of the path to the catalog, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the FOQUZ platform, related to synchronization errors when using a shared resource, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

threat-team

谷歌威胁情报组 注意：此仓库不再维护。 如需最新的入侵指标IOC和威胁研究，请参阅 谷歌云威胁情报博客 和免费的 Google Threat Intelligence / VirusTotal 集合。 此仓库包含与谷歌在2021年至2026年初发布的公开博文和报告相关的入侵指标IOC。IOC按年份组织，每个文件夹对应一篇特定的博文或报告。 如需了解检测为在野利用的零日漏洞，请参阅此仓库 here。其中包含每个零日漏洞利用的根本原因分析RCA以及追踪每个零日漏洞的表格。 许可证 我们已根据 Apache License Version 2.0 提供此内容。...

APT-Hunter

APT-Hunter 以紫队思维构建的 Windows 事件日志威胁狩猎工具。 APT-Hunter 是一款用于 Windows 事件日志的威胁狩猎工具。它利用预定义的检测规则和日志统计，从海量事件中挖掘隐藏的 APT 活动，缩短发现可疑行为所需的时间。它在入侵评估中尤为有效。 结果以时间线形式输出，可直接在 Excel、Timeline Explorer、Timesketch 等工具中分析，也可在内置的 Web 仪表板中查看，并可选配本地 LLM 进行研判。 Introducing APT-Hunter APT-Hunter v3.0: rebuilt with...

Awesome-BEC

Awesome-BEC 用于商业电子邮件欺诈（BEC）调查的攻击与防御信息资源库 Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 许可 Microsoft 门户 Azure 应用 ID Microsoft 第一方应用 ID 与 Graph 权限 Microsoft 已知客户端 ID 攻击/防御研究 作者| 链接 ---|--- Lina Lau| 将 Office 365 和 Active Directory 植入后门 - Golden SAML...

Fastir_Collector

FastIR Collector 我们已改变实时取证采集的方法，因此 FastIR Collector 不再维护。推荐使用我们的新版FastIR Artifacts 收集器 替代 概念 该工具在实时 Windows 系统上收集不同的痕迹，并将结果记录在 csv 或 json 文件中。通过对这些痕迹的分析，可以检测到早期的入侵迹象。 下载 二进制文件可在本项目的 发布页面 中找到。 要求 pywin32 python WMI python psutil python yaml construct distorm3 hexdump pytz 或者，reqs.pip 文件中提供了 pip...

CVE-2024-10140

CVE-2024-10140 该脚本利用了在端点 /php/managesupplier.php?action=delete&id=32 中发现的一个 SQL 注入漏洞。该漏洞允许攻击者通过 id 参数注入任意 SQL 命令，可能危及数据库安全并泄露敏感信息。...

POC-CVE-2019-5736

RunC-CVE-2019-5736 视频 : https://bit.ly/2WqvILb 博文 : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html 这里我想提一下，这个漏洞利用的原始开发者是Twistlock实验室的Yuval Avrahami。 运行POC 请注意，运行POC会覆盖主机上的runC二进制文件。 强烈建议你在运行POC之前备份你的runC二进制文件（通常位于/usr/sbin/runc）。 克隆仓库： $ git clone...

IoCs

IoCs Indicadores de compromiso originados por Sophos a partir de informes publicados /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...