4168 matches found
CVE-2023-20198-IOS-XE-Scanner
CVE-2023-20198-IOS-XE-Scanner Scanner monothread pour une seule IP en PowerShell PoC très rapide et sale pour démontrer le concept. Testé en laboratoire. À utiliser à vos risques et périls ! Autres scanners python https://github.com/fox-it/cisco-ios-xe-implant-detection...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 WinREST/PowerShell invokeCommand를 통한 Windows Admin Center 인증 RCE. 사용법: python3 wacrce.py "" WACPASS= python3 wacrce.py 환경 변수: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally ┌──pwn㉿pwn-/HTB/DanglingTree └...
Fix-CVE-2023-36884
Fix-CVE-2023-36884.ps1 Solution temporaire pour atténuer la vulnérabilité CVE-2023-36884. Cette vulnérabilité affecte le système d'exploitation Windows et peut permettre l'exécution à distance de code malveillant. CVE-2023-36884 » CVE-2023-36884 La vulnérabilité CVE-2023-36884 est une faille de...
Malicious code in esm-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c5c67c48596e011158554f8b5ea57d65a8a8dc3b5f4120d3c9c4d1cf961da2 The package advertises itself as a zero-dependency dotenv parser but its main entry dist/index.cjs and CLI bin dist/cli.cjs both invoke...
MAL-2026-17305 Malicious code in esm-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c5c67c48596e011158554f8b5ea57d65a8a8dc3b5f4120d3c9c4d1cf961da2 The package advertises itself as a zero-dependency dotenv parser but its main entry dist/index.cjs and CLI bin dist/cli.cjs both invoke...
Malicious code in stestenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee35b23a60484ee1d468154734cc7cdbc8c7d3cbc81901ab680cb67e46a8c2b6 On require of the package's main entry, dispatchAnalytics reads a payload hidden in the JPEG APP13 marker 0xFFED segment of the bundled dist/stest.jp...
MAL-2026-17309 Malicious code in stestenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee35b23a60484ee1d468154734cc7cdbc8c7d3cbc81901ab680cb67e46a8c2b6 On require of the package's main entry, dispatchAnalytics reads a payload hidden in the JPEG APP13 marker 0xFFED segment of the bundled dist/stest.jp...
MAL-2026-17298 Malicious code in testosu888 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faa5787fbebe8c5d73f3291c77975efb91c504dddf6a1d82cbe7e9f25372b27 On loading dist/index.cjs main entry and on running the dot2env CLI dist/cli.cjs, the package invokes a dispatchAnalytics routine that reads...
CyberCodex
🌐 CyberCodex v3.2 - 22源全频谱版 -00FF41?style=for-the-badge&logo=python&logoColor=white CyberCodex 是一个自主、自更新的 22源零成本OSINT、数据泄露/泄漏与威胁情报引擎 、无偏见网络战百科全书（事件法典） 、MITRE ATT &CK知识库以及双视角技术词典 ，专为 Windows CMD、PowerShell 和 Linux 终端 设计，且零外部依赖 。 📡 22个零成本公共情报与泄漏源（无需API密钥） | 情报来源| 端点 / 协议| 提取的遥测数据| 成本 / 密钥...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12267 Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection during a Windows DNS SPF/TXT record push. This vulnerability can lead to remote code execution (RCE). The provided documents do not specify the exact component, file, or root cause details beyond the injec...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
EUVD-2026-88213
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
PT-2026-99849
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6201 Description An issue exists that allows PowerShell command injection during the Windows DNS SPF/TXT record push process, which can lead to remote code execution. Recommendations Update ManageEngi...
Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager
CVE-2020-14008 — ManageEngine Applications Manager Remote Code...
Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager
CVE-2020-14008 — ManageEngine Applications Manager Remote Code...
CVE-2026-100584
OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...