CVE-2022-30190_Temporary_Fix

🩹CVE-2022-30190 临时修复🩹 这些是两个 Python 脚本，经过编译后可轻松快速地应用针对 CVE-2022-30190 漏洞（Follina） 的临时保护。 它们都可以编写得更好，但这只是为了尽可能快速地实现，而且我是在没有太多 Python 知识的情况下完成的，但重要的是…… 它能用！ 嘿嘿 这些 '.exe' 文件有什么作用？: 分步操作（ 'CVE-2022-30190temp-fix.exe' ）： 1. 备份注册表项 'HKEYCLASSESROOT\ms-msdt' 。 2. 删除注册表项 'HKEYCLASSESROOT\ms-msdt' 。 3...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilege Escalation Bug credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Usage root@kitploit: pytho...

CPSC253_CybersecurityFinalProjectReports

Introduction These papers were part of my final project for my Cybsecurity class: CPSC 253 - Cybersecurity Foundations and Principles The premise of my final project was that I was a newly hired consultant in a research center and helped optimize their security around their server room. Phase 1 W...

CVE-2026-86193

grav-plugin-api versions before 1.0.20 contain an authentication bypass in its user-management guards. The root cause is a failure to validate group-inherited super permissions , allowing non-super user managers holding api.access and api.users.write to modify super-admin accounts by patching the...

malware-ioc

Lucid Lucid 钓鱼即服务（PhAAS）平台由 XinXin 组织开发，用于针对全球组织（包括邮政和快递服务）发起大规模钓鱼活动。该组织利用 RCS 和 iMessage 等先进技术，并采用自动化工具和规避技术来绕过检测。LARVA-242 等关键行为者通过层级化结构管理运营，同时将窃取的数据货币化。Lucid 的技术复杂性和全球影响力凸显了 PhAAS 平台日益增长的威胁。 完整报告可在此获取。 失陷指标（IOC） 活跃实例 101.32.109.9 107.189.12.219 124.156.195.69 154.205.139.195 154.205.154.32...

ict279-cve-2025-54793

ict279-cve-2025-54793 Proyecto grupal — detección y mitigación de CVE-2025-54793 Bhuvanesh, Shiva, Emma...

BadSamba

描述 此模块用于利用 Windows 组策略设置中的启动脚本执行， 这些脚本被配置为从远程 SMB 共享运行。 Windows 组策略可用于配置启动脚本，这些脚本将在操作系统每次开机时 执行，并以高权限账户 NT AUTHORITY/SYSTEM 运行。 如果攻击者能够执行流量操纵攻击，并在系统重启期间将流量重定向 到恶意 SMB 服务器，就有可能以 SYSTEM 账户 远程执行命令。 此模块接受所有形式的身份验证，无论是匿名、 域账户、空密码还是不存在的账户。它允许任何用户连接 到 SMB 服务器和共享。 它还会执行文件伪装，无论客户端原始请求的是哪个文件， 也无论客户端连接到哪个 S...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-14466

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

EUVD-2026-71218

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

CVE-2026-14466

Stormshield SNS is vulnerable to a stored XSS in its web administration panel. An SNS administrator with appropriate permissions can inject a malicious script into a group's comments within the webservices administration interface , leading to execution in the context of other users. The CVSS v3....

CVE-2026-85546

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

EUVD-2026-70981

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

CVE-2026-85546

MISP is affected by a cross-site request forgery (CSRF) vulnerability in its sharing group quick-edit functionality. The root cause lies in the __initialiseSGQuickEdit() helper, where the allowMethod(['post']) call was commented out, allowing the addOrg, removeOrg, addServer, and removeServer act...

CVE-2026-85546 MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

CVE-2026-85546 MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

CVE-2026-85533

An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...

CVE-2026-85533

CVE-2026-85533 is an authorization bypass in MISP (Malware Information Sharing Platform). In attribute attachment/editing and Galaxy Cluster creation/editing workflows, the Sharing Group authorization check was only executed when the distribution field was explicitly set to 4. By omitting or mani...

CVE-2026-85533 MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter

An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...

EUVD-2026-70976

An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...