374 matches found
Moodle LTI module Reflected - Cross-Site Scripting
A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...
PyStegosploit
PyStegosploit - 스테가노그래피와 폴리글롯을 통한 익스플로잇 전달 video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael 2021년 5월 Stegosploit는 'drive-by' 브라우저 익스플로잇을 인코딩하여 이미지 파일을 통해 전달하는 새로운 방법을 제공합니다. 이러한 페이로드는 현재의 수단으로는 탐지할 수 없습니다. 이 문서는 이미지 기반 익스플로잇 전달에 사용되는 두 가지 광범위한 기본...
js-driveby-download-CVE-2006-4777
js-driveby-download-CVE-2006-4777 Internet Explorer 6.0 SP1 및 Windows XP SP2의 취약점을 악용하는 클라이언트 측 악성코드입니다. 사용자 동의가 필요 없으며 파일을 다운로드하지 않습니다. Windows XP에서 IE를 통해 JavaScript로 RAM에 셸코드를 주입합니다. 파일리스, 드라이브 바이 다운로드, 클라이언트 측 악성코드...
CVE-2012-1723
CVE-2012-1723을 악용한 원격 코드 실행 웹 브라우저 드라이브 바이 공격. 워크스루 및 기술적 세부사항은 다음에서 확인할 수 있습니다. https://ethaniel.me/2017/02/09/practice-the-past-cve-2012-1723/...
WebFEET
Web Filter External Enumeration Tool WebFEET WebFEET NCC Group Plc가 오픈소스로 공개 - http://www.nccgroup.com/ Ben Williams 개발 https://github.com/nccgroup/webfeet AGPL 라이선스로 배포됨, 자세한 내용은 LICENSE 참조 WebFEET은 웹 보안 프록시 및 정책을 드라이브바이방문만으로 방식으로 열거하기 위한 웹 애플리케이션입니다. 관련 백서:...
CVE-2018-4878
저자 및 크레딧 저자: Vincent Yiu @vysecurity 크레딧: @evi1cg: 테스트와 동기 부여에 도움을 준 분 @smgoreli: 원본 Calc.exe PoC 제공자 @kbandla: 그분도 알고 저도 압니다. ; 면책 조항 더 많은 Aggressor 스크립트 개발을 장려하기 위해 개발되었습니다. 승인된 침투 테스트에서만 사용하십시오! 설명 2018년 2월 이전의 Shockwave Flash 플레이어 버전을 대상으로 하는 CVE-2018-4878 익스플로잇을 사용하여 Internet Explorer 드라이브바이...
Malicious code in @demopack/www (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65caef119676a35e0ed5c3ef5a3be0d08c6a487c57270c802319fe68521dadd Package.json describes the package as 'Static assets distribution', but the shipped HTML/JS is an iOS-version-gated payload loader. js/index.js...
PT-2026-64077
Impact The FiftyOne App/API server fiftyone/server/app.py and the /media route fiftyone/server/routes/media.py unconditionally set a permissive CORS header Access-Control-Allow-Origin: on their responses. Because the embedded App server runs locally and is unauthenticated, this allows any website...
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Impact The FiftyOne App/API server fiftyone/server/app.py and the /media route fiftyone/server/routes/media.py unconditionally set a permissive CORS header Access-Control-Allow-Origin: on their responses. Because the embedded App server runs locally and is unauthenticated, this allows any website...
VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer
Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureLogs. The activity has been codenamed VEILDROP by Securonix. It's suspected that the initial payloads are distributed...
CVE-2026-56277 Flowise - Hardcoded CORS Wildcard in TTS Endpoint
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard on its text-to-speech TTS generation endpoint packages/server/src/controllers/text-to-speech/index.ts, independent of the server's configured CORS policy. This bypasses the server's otherwise restrictive default CORS...
coruna
iOS Orchestrator — Coruna Web server, C2 listener, and intera...
System-Exploitation-Compromising
💀 System Exploitation & Compromising CAP 6135 – Cyber Lab...
chrome-148-exploit-poc
World Fun Zone - 2026 Security Research Framework Conferen...
CVE-2026-28792
Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration Access-Control-Allow-Origin: with the path traversal vulnerability previously reported to enable a browser-based drive-by attack. A remote attacker can enumerate the...
A DarkSword hangs over unpatched iPhones
Researchers at Google have identified an iOS exploit chain, named DarkSword, that has been used since late last year by multiple actors to infect iPhones with malware in targeted attacks. DarkSword combines six vulnerabilities in iOS and Safari to deploy malware on the device. It demonstrates, on...
EUVD-2026-11611
TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS...
CVE-2026-28792
Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration Access-Control-Allow-Origin: with the path traversal vulnerability previously reported to enable a browser-based drive-by attack. A remote attacker can enumerate the...
CVE-2026-28792 Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS
Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration Access-Control-Allow-Origin: with the path traversal vulnerability previously reported to enable a browser-based drive-by attack. A remote attacker can enumerate the...
