cve-2018-12798

Adobe Acrobat Reader 堆溢出远程代码执行漏洞 漏洞 内存缓冲区边界内操作限制不当漏洞 漏洞描述 该漏洞允许远程攻击者在受影响的 Adobe Acrobat Pro DC 安装中执行任意代码。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 Unicode 字符串的处理过程中。在解析过程中，进程在将用户提供的数据复制到固定长度的基于堆的缓冲区之前，未正确验证其长度。攻击者可以利用此漏洞在当前进程上下文中执行代码。 CVE 编号 CVE-2018-12798 厂商 www.adobe.com 产品 Acrobat DC...

ciscoasa_honeypot

Cisco ASA 蜜罐 Cymmetria Research, 2018. https://www.cymmetria.com/ 联系方式：[email protected] 一个针对 Cisco ASA 组件的低交互蜜罐，能够检测 CVE-2018-0101，即 DoS 和远程代码执行漏洞 根据 MIT 许可证发布，供社区使用。 用法 root@kitploit: Usage: asaserver.py OPTIONS A low interaction honeypot for the Cisco ASA component capable of detecting...

CVE-2017-8759

CVE-2017-8759 武器化 PoC 本仓库包含可用来武器化 CVE-2017-8759 漏洞的数据。 如需完整信息，请访问 https://www.mdsec.co.uk/blog/ 查找与本漏洞相关的文章。 与以往一样，我的研究旨在帮助社区更好地意识到不断上升的威胁，同时也帮助对抗模拟社区更好地模拟针对客户环境的真实威胁，从而更好地教育和告知他们。未经事先同意，不得将我的研究用于任何目标。 武器化视频可在此处找到：https://www.youtube.com/watch?v=hlkx5uYBT1Y 致谢 感谢我自己，Vincent Yiu @vysecurity，实现了无需交...

CVE-2023-7028

CVE-2023-7028 | Gitlab 账户接管 免责声明 此代码是该漏洞的概念验证（PoC），我不鼓励任何人在非自己拥有的 GitLab 实例上使用它。 此工具仅用于研究和教育目的，对于您使用它所做的任何行为，我概不负责。 描述 本仓库是https://github.com/Vozec/CVE-2023-7028 的分支。我只是改进了漏洞利用的使用方式。 CVE-2023-7028 是一个账户接管漏洞，允许用户在无需目标用户交互的情况下接管 GitLab 管理员账户。 该漏洞存在于重置密码时的电子邮件管理流程中。攻击者可以提供两个电子邮件地址，重置验证码将同时发送到这两个地址。...

CVE-2026-92967

CVE-2026-92967 affects the Pochipp WordPress plugin in versions up to and including 1.20.2 . The vulnerability is a Reflected Cross-Site Scripting flaw in the keyword parameter. The root cause is insufficient output escaping: the code reads $_GET['keyword'], applies only sanitize_text_field() (wh...

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

weblogic_honeypot

WebLogic HoneyPot（WebLogic 蜜罐） Cymmetria Research, 2018. https://www.cymmetria.com/ 作者：Omer Cohen @omercnet 特别感谢：Imri Goldberg @lorgandon、Itamar Sher、Nadav Lev 联系方式：[email protected] WebLogic HoneyPot 是一个低交互蜜罐，用于检测 Oracle Fusion Middleware 组件 Oracle WebLogic Server 中的 CVE-2017-10271...

log4j-honeypot-flask

log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...

CVE-2025-36045

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

CVE-2025-36045

IBM TS4300 Tape Library (versions 1.1.0.1 through 1.7.1.1) is affected by a denial-of-service vulnerability in its email service. Email-related functions in the web GUI and APIs did not enforce rate limiting, allowing an authenticated user to repeatedly invoke email-sending requests and generate ...

EUVD-2025-210956

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

CVE-2025-36045 TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

EUVD-2025-210934

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

cve-2024-30350-research-notes

Notas de investigación de CVE-2024-30350 Descripción general CVE-2024-30350 es una vulnerabilidad de divulgación de información por lectura fuera de límites en Foxit PDF Reader. El problema fue publicado por Trend Micro Zero Day Initiative como ZDI-24-333 y rastreado antes de su divulgación como...

CVE-2023-7028

CVE-2023-7028 GitLab CVE-2023-7028：无需用户交互即可通过密码重置接管账户 GitLab CE/EE 中的一个严重漏洞（CVE-2023-7028）可被攻击者轻易利用，从而重置 GitLab 用户帐户的密码。 虽然这些帐户同样存在漏洞，但已启用双因素认证（2FA）的用户可以免受帐户接管的影响。此外，LDAP 登录也是安全的！ 关于 CVE-2023-7028 CVE-2023-7028 影响运行 GitLab Community Edition CE 和 Enterprise Edition EE 以下版本的 GitLab 自托管实例：...

honssh

!!! 该项目已不再维护。 !!! HonSSH https://github.com/tnich/honssh 版权所有 C 2016 Thomas Nicholson HonSSH 旨在与高交互蜜罐配合使用。HonSSH 位于攻击者和蜜罐之间，并创建两个独立的 SSH 连接。 阅读维基 - https://github.com/tnich/honssh/wiki HonSSH 受 Kippo 启发并部分基于 Kippo。 https://github.com/desaster/kippo 本项目的部分内容使用了 Kippo 代码，其版权仍归 Upi Tamminen 所有。...