WMIcmd

問題 低影響の調査やその他の類似活動を行う際、ディスクに書き込まれるもの / 露見するものを最小限に抑えたい場合があります。 このツールを使用すると、WMIを介してコマンドを実行し、このチャネルでは他に得られない情報を取得できます。 目的 WMIのみを使用して以下を行う小さなユーティリティ: コマンドシェルコマンドを実行する これらのコマンドの標準出力をキャプチャしてレジストリに書き込む レジストリから読み取り、その後削除する ローカルの標準出力に出力する 設計 このツールは以下で構成されています: NCC Group 内部コアライブラリ WMICore のごく小さなサブセット コマンド...

CVE-2021-21315-exploit

CVE-2021-21315 エクスプロイト 説明: Node.JS用のシステム情報ライブラリ（npmパッケージ「systeminformation」）を悪用する私のPythonスクリプト。 npmjs.com/systeminformation このPOCは現実世界への影響を示さないと思っていましたが、CTFではかっこいいでしょう。...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.99 security and extras update

Red Hat OpenShift Container Platform release 4.12.99 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low...

CVE-2017-8481

此存储库没有 README。...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 packages and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 packages and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 security and extras update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

rabbitmq-server: RabbitMQ: Unsanitized vhost names allow for XSS in management UI

A flaw was found in RabbitMQ, a messaging and streaming broker. Unsanitized virtual host names allow for XSS in the the management UI pages that list virtual hosts if the attacker manages to find a way to force a virtual host to restart. This vulnerability requires high privileges and user...

Astra Linux – Vulnerability in imagemagick

A floating-point mathematical calculation within the ScaleAnyToQuantum function in /MagickCore/quantum-private.h could lead to undefined behavior, resulting in a value that falls outside the range of the type unsigned long long. This flaw can be triggered by a malicious input file under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-76971

SAP Manufacturing Integration and Intelligence contains a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execut...

CVE-2026-76971 Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence

Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...

CVE-2026-76961 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76961 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76959 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...