494581 matches found
linux_mint_poc
Bug de inyección de comandos en 'yelp' de Linux Mint 18.3-19.1 Causa raíz Los manejadores de URI help://, ghelp:// y man:// están definidos en el archivo /usr/share/applications/yelp.desktop, que ejecutará /usr/local/bin/yelp mediante Exec=yelp %u cada vez que se invoque uno de esos manejadores d...
CVE-2022-30510
CVE-2022-30510 School Dormitory Management System 1.0 - 未经验证的SQL注入 Exploit标题: School Dormitory Management System 1.0 - 未经验证的SQL注入 日期: 2022-05-25 CVE: CVE-2022-30510 Exploit作者: Abdulaziz Saad @b4zb0z 厂商主页: https://www.sourcecodester.com/ 软件链接:...
CVE-2024-39304
Descripción Este script es un PoC para CVE-2024-39304, donde es posible una SQLi debido a la falta de sanitización en el proyecto ChurchCRM. Uso python3 CVE-2024-39304.py -u -p -b -v Ejemplo: python3 CVE-2024-39304.py -u FirstLast -p Password123 -b http://localhost/churchcrm -v Enlaces...
agentic-ioc-scanner
agentic-ioc-scanner 针对自主AI编码工具的IOC扫描器——检测 Mini Shai-Hulud、Gemini CLI RCE、Cursor CVE-2026-26268 以及 DPRK PromptMink。 一个检测工具包，用于检测自主AI编码助手（Claude Code、Gemini CLI、Cursor）及其拉入仓库的依赖项是否受到危害。共十一个检查项，涵盖钩子注入、RCE配置、恶意依赖、Git钩子后门以及CI工作流篡改。IOC列表外部化——添加新指标无需修改代码。 配套博客文章：When the Tool Fights Back。 包含内容 1. IOC扫描器...
Egyscan
EgyScan V3.4 "Ultra" : 你的坚不可摧的数字堡垒 🏰 数字领域的守护者们，你们好！ 🛡️ 准备好与 EgyScan V3.0 一起踏上非凡旅程吧，它是终极守护者，能将你的网站变成抵御无情网络威胁的坚固堡垒。让我们探索数字防御的未来，EgyScan 将成为守护你在线疆域的无敌力量。 🚀 释放 EgyScan 的无与伦比的力量 🚀 EgyScan 不仅仅是一个工具；它是你数字存在的守护天使。它拥有： 🔍 全面漏洞检测： EgyScan 的卓越之处在于它能够揭示从常见到隐秘的各种漏洞。数字世界的每个角落都逃不过它的眼睛。 🌐 网络地图绘制大师：...
VectorKernel
VectorKernel PoCs para investigación o educación en técnicas de rootkits en modo kernel. Actualmente enfocado en el sistema operativo Windows. Todos los módulos son compatibles solo con sistemas operativos de 64 bits de la familia x64. Entorno Todos los módulos se prueban en Windows 11 x64. Para...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...
CVE-2024-24576-PoC-Python
CVE-2024-24576-Poc-Python 针对此漏洞的快速 POC，漏洞披露见 https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ 运行脚本后，它会要求传递一个参数给 BAT 文件。 在截图中可以看到，通过添加双引号，Windows 用于调用 cmd 的底层 API 可以被绕过，从而实现任意命令执行，本例中我们打开了 calc.exe。 显然，这段代码本身并非恶意，它只是用于演示：即使经过清理的输入（除非你移除所有双引号），如果它调用的是 BAT...
CVE-2024-37759_PoC
CVE-2024-37759 PoC Descripción DataGear versión 5.0.0 y anteriores tiene una vulnerabilidad de inyección de expresiones SpEL que conduce a la ejecución remota de código. Exploit Detalles del Exploit CVE Cuando solicita la interfaz /data/schemaId/tableName/view, si la tabla de la base de datos no...
CVE-2019-15107
CVE-2019-15107 Webmin RCE Failed to change password : The current password is incorrectuid=0root gid=0root groups=0root Python 使用方法： python CVE201915107.py https://10.10.20.166:10000 cmd root@kitploit: C:\Users\CTF\Desktoppython CVE201915107.py https://10.10.20.166:10000 id |...
CVE-2026-96759
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary JavaScript code through a crafted operationId in an OpenAPI specification that executes when generated hooks are called...
CVE-2026-96758
orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject $... expressions into OpenAPI schema property names that execute as live interpolation when the...
CVE-2026-96755
orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. Attackers can inject arbitrary JavaScript expressions via schema defaults containing $... syntax, which are executed at module...
CVE-2026-96756
orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date calls. Attackers can inject arbitrary expressions through apostrophes in OpenAPI schema defaults to execute code with the privileges of the...
CVE-2026-96757
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject JavaScript through crafted media-type keys in OpenAPI specifications that executes when generated fetch operations or mock resolve...
CVE-2026-96514
A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of the argument uname causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...
CVE-2026-95846
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...
CVE-2026-93349
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...