XWiki-Platform-RCE-CVE-2025-24893

استغلال تنفيذ أوامر عن بُعد غير مصادق عليه في منصة XWiki نظرة عامة هذا النص البرمجي هو تنفيذ مُحسَّن بلغة Bash لاستغلال الثغرة الأمنية التي تؤثر على إصدارات منصة XWiki المتأثرة بـ CVE-2025-24893. يستغل ثغرة تنفيذ أوامر عن بُعد خطيرة غير مصادق عليها تسمح للمهاجمين بتنفيذ كود Groovy عشوائي من خلال...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki استغلال RCE بدون مصادقة إصدارات XWiki المتأثرة الإصدارات 15.10.11 الإصدارات 16.4.1 الإصدارات 16.5.0RC1 وصف الثغرة تحتوي إصدارات XWiki المتأثرة على ثغرة تنفيذ تعليمات برمجية عن بُعد RCE ناتجة عن معالجة غير آمنة لتعبيرات Groovy في ماكرو SolrSearch. يمكن للمهاجمين غير المصاد...

7-Zip-CVE-2025-0411-POC

🦀 Rust Macros No Recoil image Download 🚀 نظرة عامة تقدم أداة "Rust Macros No Recoil" تجربة سلسة لتقليل ارتداد الأسلحة في لعبة Rust. من خلال نصوص برمجية فعالة وماكروهات مُخصصة، تمنح هذه الأداة اللاعبين تحكمًا ودقة أفضل أثناء اللعب. الأداة محسّنة من حيث الموثوقية وسرعة التحديث، ومبنية مع مراعاة سلا...

CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367

A macro injection vulnerability in RPM's rpmbuild tarball processing mode allows a remote attacker to achieve arbitrary code execution . The root cause is in the getTarSpec() function (tools/rpmbuild.cc), which passes an attacker-controlled tar member name to rpmExpand() within a %{basename:...} ...

EUVD-2026-64885

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

Linux Distros Unpatched Vulnerability : CVE-2026-78367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an...

SauronEye

SauronEye SauronEye est un outil de recherche conçu pour aider les équipes rouges à trouver des fichiers contenant des mots-clés spécifiques. Fonctionnalités : Rechercher sur plusieurs disques réseau Rechercher dans le contenu des fichiers Rechercher dans le contenu des fichiers Microsoft Office...

serverless-application-model

Преобразование AWS SAM Преобразование AWS Serverless Application Model AWS SAM — это макрос AWS CloudFormation, который преобразует шаблоны SAM в шаблоны CloudFormation. Чтобы использовать преобразование SAM, добавьте AWS::Serverless-2016-10-31 в раздел Transform вашего шаблона CloudFormation...

obfus.h

obfus.h obfus.h — это библиотека только на макросах для обфускации C-приложений во время компиляции, предназначенная специально для Tiny C tcc скачать можно здесь - Tiny-C-Compiler/releases. Она ориентирована на платформы Windows x86 и x64 и поддерживает почти все версии компилятора. Очень надёжн...

luckystrike

luckystrike أداة قائمة على PowerShell لإنشاء مستندات ماكرو ضارة في Office. يُستخدم لأغراض الاختراق الأخلاقي أو التعليم فقط. البدء 1. اقرأ هذا: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. 2. اقرأ الويكي! 3. تأكد من أنك تستخدم جهاز ويندوز 7-10 32 أو 6...

CVE-2026-70654

libvips (image processing library) versions prior to 8.18.3 contain a heap buffer overflow in vips_source_read_to_memory (libvips/iofuncs/source.c). The function incorrectly uses VIPS_MAX instead of VIPS_MIN when selecting the remaining read size. Applications that define custom libvips sources a...

RUSTSEC-2026-0264 `proc-macro-en` was removed from crates.io due to malicious code

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...

`proc-macro-en` was removed from crates.io due to malicious code

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...

Malicious code in proc_macro_en (crates.io)

proc-macro-en is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carryin...