248846 matches found
EUVD-2026-90875
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...
CVE-2022-22954-Testi
CVE-2022-22954-测试 CVE-2022-22954 漏洞测试 VMware Workspace ONE Access 和 Identity Manager 存在一个因服务器端模板注入导致的远程代码执行漏洞。具有网络访问权限的恶意攻击者可以触发服务器端模板注入，从而可能导致远程代码执行。 服务器端模板注入远程代码执行漏洞 CVE-2022-22954 https://www.vmware.com/security/advisories/VMSA-2022-0011.html 请在法律允许的范围内使用。 我不对非法使用承担任何责任。 仅供测试和学习目的。 运行 python3...
CVE-2025-9223
Applications Manager - Execute Program Action Bypass PoC 📖 描述 本仓库包含一个概念验证（PoC），演示了 ManageEngine Applications Manager 中"Execute Program Action"功能存在的命令执行漏洞。 🔍 漏洞详情 Applications Manager 使用黑名单（BlackListCommands）来阻止危险命令，但验证存在严重缺陷： 基于字符串的验证 仅针对第一个令牌（token） 缺少路径规范化 或环境变量扩展 缺少防护 ，无法阻止通过脚本进行间接执行 🚨 绕过方法 方法...
CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-79899
Fortra BoKS Manager contains an insecure temporary file vulnerability in the bccgethostcert utility. The root cause is the creation of predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master with read access to files under BOKS_tmp may obtain CA secr...
EUVD-2026-90871
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-97281
The WP Project Manager plugin for WordPress (versions
EUVD-2026-90839
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
Python-CVE-2020-25213
Python-CVE-2020-25213 用于 WP File Manager 漏洞的 Python 交互式利用工具。WordPress 的 File Manager wp-file-manager 插件 6.9 版本之前允许远程攻击者上传并执行任意 PHP 代码，因为它将一个不安全的示例 elFinder 连接器文件重命名为 .php 扩展名。 该脚本使用 argparse、requests、re、sys、os、json 和 random Python 模块。 要通过 pip 安装这些模块，请在命令行中执行以下命令： pip install -r requirements.txt...
CVE-2017-11610
实验 3- CVE-2017-11610 一、系统分析 从 Docker 环境识别攻击面 从环境中正在运行的内容开始。我列出所有活动容器： docker ps-a 受害者仅暴露了一个端口：9001。 端口 9001 并非标准的 Web 应用。查阅端口数据库可知，该端口可能与 Supervisord（根据 IANA 的命名，即 ETL 服务管理器）、Tor 代理或其他某些内部服务相关联。然而，我们不能仅凭端口号就得出结论。 ⇒ 我直接使用 curl 读取响应，并访问 Web GUI 以收集更多信息 curl -i http://192.168.3.137:9001/ 响应分析： 返回的响应...
SEPM-EoP
概述 产品名称 : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - 旧版本可能也受影响 影响 : 高 。一个标准Windows用户（非管理员）可以提升到 NT SERVICE\semwebsrv 。通过此用户角色，他可以访问许多SEPM组件，并篡改jsp、php以及可能的jar文件。似乎完全接管SEPM是可能的。此外，还可以进一步提升到SYSTEM。 漏洞类型 : DLL预加载 DLL : dbicudtx16.dll 受影响进程 : php-cgi.exe 攻击向...
Metasploit-Exploits-CVE-2023-6710
CVE-2023-6710 漏洞利用 POC 通过 Metasploit 和我们全面的概念验证 PoC，深入探索 CVE-2023-6710。该 CVE 被认定为潜在安全漏洞，我们对其进行了细致研究，以展示其影响并提供对相关风险的实践理解。 安装 git clone https://github.com/DedSec-47/Metasploit-Exploits-CVE-2023-6710.git cd Metasploit-Exploits-CVE-2023-6710 sudo mv modclusterxss.rb...
nmap-scripts
nmap-scripts 用于漏洞 cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 的 nmap 脚本 CVE-2020-0796 Microsoft 服务器消息块 3.1.1 SMBv3 协议处理某些请求的方式中存在一个远程代码执行漏洞，又称"Windows SMBv3 客户端/服务器远程代码执行漏洞"。 CVE-2019-7238 Sonatype Nexus Repository Manager 3.15.0 之前版本存在不正确的访问控制。 CVE-2019-11580 Atlassian Crowd 和...
CVE-2020-10199_POC-EXP
影响版本 + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version + + EXP: python3 cve-2020-10199cmd.py http://127.0.0.1:8081 admin admin + + VER: Nexus Repository Mana...
CVE-2026-79901
Affected versions of boks_keytabmd in BoKS Manager deployments using BoKS keytab management contain a vulnerability where Active Directory service-account passwords are generated from a predictable pseudo-random sequence. The sequence is seeded with the current Unix timestamp , allowing an attack...
CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager
In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...
CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager
In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...
