CVE-2023-36845

CVE-2023-36845 Utilizzo? bash cve.sh yourfile.txt Riferimenti: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 Ein Proof of Concept für die Verkettung der CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847, entwickelt von @watchTowr, um Remote Code Execution in Juniper JunOS auf SRX- und EX-Serie-Produkten zu erreichen...

CVE-2023-36845

CVE-2023-36845 Descrizione CVE-2023-36845 rappresenta una notevole vulnerabilità di manipolazione delle variabili d'ambiente PHP che interessa i firewall Juniper SRX e gli switch EX. Sebbene Juniper abbia classificato questa vulnerabilità come di gravità media, in questo articolo chiariremo come...

Crystal-Kit

Crystal Kit Questa repo è un esperimento tecnico e sociale per esplorare se sostituire le primitive di evasione di Cobalt Strike Sleepmask/BeaconGate con un PICO di Crystal Palace sia fattibile o addirittura auspicabile per scenari di evasione avanzati. Utilizzo 1. Disabilita la sleepmask e le...

CVE-2023-36844_Juniper_RCE

CVE-2023-36844JuniperRCE Una Proof of Concept per concatenare le CVE CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 al fine di ottenere l'esecuzione remota di codice phpinfo in Juniper JunOS all'interno dei prodotti delle serie SRX ed EX.Modificato dall'exploit originale sviluppat...

CVE-2023-36845-POC

CVE-2023-36845 Script di automazione PoC Questo script fornisce un Proof of Concept PoC automatizzato per la vulnerabilità identificata come CVE-2023-36845, che colpisce il componente J-Web di Juniper Networks Junos OS sui dispositivi delle serie EX e SRX. Dimostra la potenziale modifica remota...

CVE-2023-32784-EXPLOIT-REPORT

Dimostrazione dell'Exploit CVE-2023-32784 Panoramica del Progetto Questo repository fornisce una dimostrazione di CVE-2023-32784, una vulnerabilità critica presente nelle versioni di KeePass precedenti alla 2.54. L'exploit consente il recupero della password principale tramite dump della memoria,...

CVE-2023-36845

CVE-2023-36845 Una vulnerabilità di modifica di variabili esterne PHP in J-Web di Juniper Networks Junos OS sulle serie EX e SRX consente a un attaccante non autenticato, con accesso di rete, di controllare determinate variabili d'ambiente. Utilizzo dello Script root@kitploit: $ dos2unix...

CVE-2023-36845-Juniper-Vulnerability

CVE-2023-36845 Questo script fornisce un Proof of Concept PoC automatizzato per CVE-2023-36845, una vulnerabilità che interessa Juniper Networks Junos OS sui dispositivi delle serie EX e SRX. Sfrutta il componente J-Web, consentendo la modifica remota della variabile PHPRC e potenziali iniezioni ...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

CVE-2023-36844

CVE-2023-36844 La vulnerabilità "Esecuzione di codice remoto nei prodotti Juniper JunOS all'interno delle serie SRX ed EX" è un problema di sicurezza che consente a un aggressore di eseguire codice arbitrario su un dispositivo Juniper target che esegue il software JunOS. Questa vulnerabilità...

ALPINE-CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

DEBIAN-CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

CVE-2026-73073 Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

CVE-2026-73073

Prior to Vim 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim builds a vimgrep command from a tags file's typeref:/typename: field without sufficient escaping. A crafted tag entry can inject an unterminated collection and command separator, executing arbitrary Ex/OS commands when a use...

PT-2026-72427

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN". Section 8.8 of the SNP spec says: Before invoking SNP INIT EX with...

SUSE CVE-2026-73078

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu...

CVE-2026-73078

A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user. Mitigation To mitigate this issue, avoid browsi...

Vim < 9.2.0840 Arbitrary Code Execution (GHSA-rcr7-f3wr-22r2)

The version of Vim installed on the remote host is prior to 9.2.0840. It is, therefore, affected by a vulnerability as referenced in the GHSA-rcr7-f3wr-22r2 advisory. - runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and...

ALPINE-CVE-2026-73078

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu...