CVE-2026-12663

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice ...

CVE-2025-12768

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Investigación de Vulnerabilidad de Hardware Un documento de investigación en profundidad y una Prueba de Concepto PoC práctica que explora ataques de ejecución especulativa en CPUs modernas. 📖 Resumen Este proyecto es una exploración de investigación y...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 威胁分析 Microsoft MSDT远程代码执行零日漏洞 — 活跃利用调查 by MUHAMMAD ZAWAR KHATTAK 🔗 查看完整分析报告 → 🧪 场景 周五晚上，团队收到一个正在野外被积极利用的新RCE漏洞警报。我的任务是分析和研究恶意样本，为周末团队收集情报。 🧰 使用的工具 工具| 用途 ---|--- VirusTotal| 静态分析、文件哈希、联系URL Any.Run| 动态沙箱、MITRE ATT&CK映射 CVE.org| 官方漏洞研究 OSINT / GitHub| 检测规则、威胁情报 Linux CLI|...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Validación y Detección de SP Page Builder para Joomla Validación de laboratorio de CVE-2026-48908 en el componente SP Page Builder de Joomla, centrada en evidencia técnica, reconstrucción de eventos y oportunidades de detección defensiva. El repositorio documenta una prueba...

pentest-writeups

pentest-writeups Kioptrix Level 1 渗透测试报告 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — 渗透测试报告 作者： Amirbek Raxmatullayev @americo444 日期： 2026-06-17 平台： VulnHub 难度： 入门 目标： 获取 root 权限 1. 环境搭建 组件| 详情 ---|--- 宿主机操作系统| Ubuntu 26.04 虚拟机管理程序| QEMU/KVM 目标| Kioptrix Level 1 VMDK 攻击机 IP| 192.168.56.1...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 关于漏洞 React2Shell 是一种影响以下组件的严重远程代码执行 RCE 漏洞： 目标| 受影响版本 ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-parcel| 19.1.0, 19.1.1, 19.2.0 🔺 Next.js| 15.0.0-15.0.4,...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

漏洞评估与OSINT：CVE-2012-1823 我的仓库记录了在目标网络扫描中发现、分析并收集特定安全漏洞的开源情报（OSINT）的完整过程。 流程概览 本次评估执行的工作流程分为四个主要阶段： 1. 侦察与漏洞检测 使用工具 ：Nmap 操作 ：使用以下命令执行高级网络扫描： root@kitploit: nmap --script-help http-vuln-cve2012-1823 发现结果 ：目标环境正在运行过时的 PHP-CGI 配置。NSE（Nmap 脚本引擎）脚本确认存在 CVE-2012-1823 ，这是一个侵入性的 PHP-CGI...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT 许可证 Servlet 反序列化远程代码执行 由 Sentinel AI Defense 编写的研究报告。仅用于防御分析——此处未发布任何有效的漏洞利用或 PoC。 一条满分的反序列化链存在于 Fortra GoAnywhere MFT 中：伪造的许可证响应签名使未经身份验证的攻击者能够反序列化任意对象，并在文件传输服务器上实现命令执行。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-10035-goanywhere-deserialization.ht...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Validación y Detección de RDS en Adobe ColdFusion Validación de laboratorio de CVE-2026-48282 en Adobe ColdFusion Remote Development Services RDS, centrada en evidencia técnica, reconstrucción de eventos y oportunidades de detección defensiva. El repositorio documenta una prueba...

web-penetration-drupal

Pruebas de Penetración Web — Drupal CVE-2018-7600 Tipo: Proyecto de Prácticas | Empresa: BB CyberSec | Período: Nov 2024 – Ene 2025 📋 Resumen del Proyecto Este proyecto documenta una prueba de penetración completa realizada sobre una aplicación web Drupal como parte de mis prácticas de...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69149

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

CVE-2026-73570

CVE-2026-73570 CVE-2026-73570 PoC 更多 root@kitploit: echo 'EHLO mx-test.invalid MAIL FROM: RCPT TO: QUIT\r\n' | nc 127.0.0.1 587...

CVE-2026-9634 Redundancy Module Configuration Tool - Multiple Vulnerabilities

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loca...

CVE-2025-12768

CVE-2025-12768 is an out-of-bounds write vulnerability in FactoryTalk® Historian Machine Edition (Rockwell Automation). An attacker with low-level authentication can exploit it to achieve remote code execution on the affected device. The CVSS 4.0 score is 8.6 (HIGH) , with an adjacent network att...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

EUVD-2025-210818

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...