3067 matches found
CVE-2025-53772-IIS-WebDeploy-RCE
CVE-2025-53772 - IIS WebDeploy RCE エクスプロイト このリポジトリには、安全でない逆シリアル化による IIS WebDeploy のリモート コード実行 RCE 脆弱性 CVE-2025-53772 の概念実証 PoC エクスプロイトが含まれています。 ⚠️ 免責事項 このツールは、教育および許可されたセキュリティテストのみを目的としています。作者は、このソフトウェアの誤用または損害について一切責任を負いません。所有しているシステム、またはテストする明示的な許可を得たシステムでのみ使用してください。 🔧 クイックセットアップ 1. ペイロードのカスタマイズ...
IIS_6.0_WebDAV_Ruby
IIS6.0WebDAVRuby IIS 6.0 バッファオーバーフロー用 Ruby エクスプロイト CVE-2017-7269 このエクスプロイトは、Zhiniang Peng と Chen Wu によって発見された ScStoragePathFromUrl バッファオーバーフローを悪用します。 使い方: ruby exploit.rb エンコードオプション は必須オプションを示します。...
cve-2017-7269
cve-2017-7269 用の修正版 msf モジュール 物理パスの長さが19でない場合、またはホストバインディングがある場合に動作しない問題を修正。 オプションを追加: PhysicalPathLength、HttpHost テスト用: ホストの物理パス: c:\inetpub\ 、長さ=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module options exploit/windows/iis/cve-2017-7269: Name Current...
Exchange_IOC_Hunter
ExchangeIOCHunter 説明： IISログ内のIOCをハントします - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 サポート対象のアーティファクト： C2 IPアドレス（スキャンおよび悪用に使用） ファイル名（悪用の試みで観測されたもの） リモートコード実行（RCE） 使用方法： powershell .\ExchangeIOCHunter.ps1 更新情報： このリポジトリは、セキュリティエンゲージメントの進化に伴い、新しいIOCで更新されます。...
CVE-2026-100669
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
CVE-2026-100669
Grav versions before 2.0.25 ship web server configuration samples with case-sensitive deny rules, leading to sensitive file disclosure . In webserver-configs/web.config (IIS), the ignoreCase="false" setting on URL Rewrite elements allows unauthenticated remote attackers to bypass access controls ...
EUVD-2026-87763
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
CVE-2026-100669: Improper Handling of Case Sensitivity
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...
Progress Telerik Report Server - Authentication Bypass
In Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. id: CVE-2024-4358 info: name: Progress Telerik Report Server - Authenticatio...
Windows Server 2003 & IIS 6.0 - Remote Code Execution
Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...
Kentico CMS Insecure Deserialization Remote Code Execution
Kentico CMS is susceptible to remote code execution via a .NET deserialization vulnerability. id: CVE-2019-10068 info: name: Kentico CMS Insecure Deserialization Remote Code Execution author: davidmckennirey severity: critical description: Kentico CMS is susceptible to remote code execution via a...
Exploit for Unsafe Reflection in Progress Telerik_Ui_For_Asp.Net_Ajax
Telerik RadAsyncUpload RCE Exploit CVE-2026-13181 through 1...
GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
...