72358 matches found
WordPress Motors plugin < 1.4.124 - Subscriber+ Cross-User Post Meta Modification vulnerability
Subscriber+ Cross-User Post Meta Modification vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Motors versions 1.4.124...
wmiexec-RegOut
⛔ 폐기됨 현재 https://github.com/XiaoliChan/wmiexec-Pro 에서 활성화됨 wmiexec-RegOut impacket wmiexec.py, wmipersist.py의 수정 버전입니다. 레지스트리에서 출력데이터, 응답을 가져오며 SMB 연결이 필요하지 않지만, 코드가 좋지 않습니다 : 목차 개요 요구 사항 사용법 치트시트 할 일 참고 자료 특별 감사: @rootclay, WeChat: xiangshan 개요 원본 wmiexec.py에서는 SMB 연결포트 445,139을 통해 응답을 받습니다. 불행히...
Red-Team-Infrastructure-Wiki
このWikiは、堅牢なRed Teamインフラストラクチャを構築するためのリソースを提供することを目的としています。Steve Borosh（@424f424f）とJeff Dimmock（@bluscreenofjeff）によるBSides NoVa 2017の講演「Doomsday Preppers: Fortifying Your Red Team Infrastructure」（スライド）を補完するために作成されました。 追加したい内容がある場合は、Pull Requestを送信するか、リポジトリにIssueを登録してください。...
ApkAnalyser
Copyright C 2012 Sony Mobile Communications AB 이 파일은 ApkAnalyser의 일부입니다. Apache License, Version 2.0 이하 "라이선스"에 따라 라이선스가 부여됩니다. 라이선스를 준수하지 않는 한 이 파일을 사용할 수 없습니다. 라이선스 사본은 다음에서 확인할 수 있습니다. http://www.apache.org/licenses/LICENSE-2.0 관련 법률에서 요구하거나 서면으로 동의하지 않는 한, 소프트웨어는 "있는 그대로" 배포되며, 명시적이거나 묵시적인 어떠...
CVE-2021-21978
CVE-2021-21978 CVE-2021-21978 RCE exp 影響バージョン VMware View Planner Harness 4.X CVE-2021-21978 と同様に、この脆弱性は認証なしで任意のファイルをアップロードでき、内蔵の py スクリプトを変更することでリモートコード実行が可能です。 注意点として、コマンド実行は docker コンテナ内で行われ、システム上で直接実行されるわけではありません。 使い方： go run CVE-2021-21978.go -h -c...
Juniper J-Web - Remote Code Execution
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...
CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...
CVE-2026-47518
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit ...
CVE-2022-38577-Processmaker
이 저장소는 보관 처리되었으며 다음으로 이동되었습니다: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - 사용자 프로필 권한 상승 CVE-2022-38577 ProcessMaker v3.5.4 이전 버전에서 사용자 프로필 페이지에 안전하지 않은 권한이 존재하는 것으로 발견되었습니다. 이 취약점을 통해 공격자는 일반 사용자를 관리자로 승격시킬 수 있습니다. 이 익스플로잇은 Metasploit 모듈 ProcessMaker Plugin Upload -...
CVE-2021-44228
Log4Shell CVE-2021-44228 緩和策 Ansible ロール この Ansible ロールは、影響を受ける Log4j JAR ファイルから脆弱な JndiLookup クラスを削除することで、Log4Shell 脆弱性 CVE-2021-44228 をプログラム的に緩和する Python ベースのスクリプトをデプロイします。 Ansible 経由で実行するように設計されていますが、必要に応じて手動でスクリプトを実行することもできます。 Log4Shell 脆弱性の詳細はこちらをご覧ください： Wikipedia NVD CVE-2021-44228 弊社の...
CVE-2026-103921
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...
copy-fail
Copy Fail PoC English CVE-2026-31431 的 Python PoC，用于在已授权的 Linux 系统上进行受控实验室测试。 仅限在您自己的环境、实验室或已获得明确许可的系统中使用。请勿针对第三方系统运行此代码。 描述 copy-fail.py 检查内核 AFALG 接口是否提供 algifaead，如果系统与此 PoC 所测试的技术兼容，则尝试修改目标 SUID 二进制的页缓存以启动交互式 PTY shell。 该脚本包含以下架构的 payload： x8664 i686 aarch64 要求 Linux。 Python 3.10 或更高版本。...
CVE-2026-103921 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...
EUVD-2026-90922
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...
CVE-2026-103921
The GraphQL Tools library (prior to version 1.1.35 ) contains a vulnerability where the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection to be disabled for Node.js connections to wss:// endpoints. If an application uses this executor directly or uses url-loa...
CVE-2026-102796
A flaw was found in the MediaWiki UserPageViewTracker extension. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted input through the filterusers or ignoreusers parameters. This allows the attacker to perform Structured Query Language SQL injection, potentiall...
CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication
CVE-2026-22017 – BLE経由の認証なしファームウェアアップデート プログラムコード（Python bleakペリフェラル） blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself: self.firmwaredata = bytearray def...
bypass360mimikatz_x64
方法：リソース変更、デジタル署名追加 解凍パスワード：6613kris清水川崎...
Dji_ble_vuln
CVE-2026-78306 — DJI Drone DUML Command Injection over Bluetooth POC CVE record: https://vulners.com/cve/CVE-2026-78306 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78306 説明 DJIドローンは、ドローンのWi-Fiインターフェースへの接続を確立し、Wi-Fi認証情報を交換するために使用されるBluetoothインターフェースを公開しています。...