S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 发布时间 2017-03-07 危害级别 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影响产品 Apache struts =2.3.5，=2.5， CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then use...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

CVE-2022-30190

CVE-2022-30190 此仓库从 Defender 角度介绍 Follina MSDT 漏洞 目录 关于 时间线 理解漏洞利用 IOC 列表 检测策略 测试与研究 缓解方案 参考链接 关于 该漏洞是 Microsoft Windows 支持诊断工具 MSDT 的远程代码执行漏洞，由 crazyman（Shadow Chaser Group 成员）报告。Microsoft 现将其追踪为 CVE-2022-30190。该缺陷影响所有仍接收安全更新的 Windows 版本（Windows 7+ 及 Server 2008+）。 正如安全研究员 naosec 所发现，威胁行为者利用该漏洞通...

CVE-2026-107909

A heap-based out-of-bounds write in the wsreadframe function src/bolt/ws.c and the bufferapplymask function src/bolt/buffer.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit...

CVE-2026-107911

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...

CVE-2026-107910

An improper authentication vulnerability in the isauthenticated function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an...

CVE-2026-107909

A heap-based out-of-bounds write in the wsreadframe function src/bolt/ws.c and the bufferapplymask function src/bolt/buffer.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit...

CVE-2026-107914

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by the fact that an export must have been previously requested by someone with the "Synchronize, import, and export...

CVE-2026-107910

An improper authentication vulnerability in the isauthenticated function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an...

CVE-2026-107911

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...

CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

CVE-2026-87121

A flaw was found in lwIP’s MQTT client. When parsing malformed MQTT fixed headers, the client can write beyond its receive buffer. A remote peer supplying crafted MQTT traffic could cause a client crash or potentially execute arbitrary code on the device. The reported affected versions are 2.0.1...

woodpecker-plugins

woodpecker-plugins usage 将插件复制到 woodpecker-framwork/plugin 目录下面，启动 java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: echo 't3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n'|nc 10.20.31.189 7001 check IIOP isOpen:...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 本仓库从 Defender 视角讨论 Follina MSDT 漏洞 目录 关于 时间线 理解漏洞利用 IOC 列表 检测策略 测试与研究 缓解方案 参考 关于 该漏洞是 Microsoft Windows 支持诊断工具 MSDT 的远程代码执行漏洞，由 Shadow Chaser Group 的 crazyman 报告。Microsoft 现已将其跟踪为 CVE-2022-30190。该漏洞影响所有仍在接收安全更新的 Windows 版本（Windows 7+ 及 Server 2008+）。 正如安全研究员 naosec...

CIMCown

CIMCown CVE-2026-20200 Inyección de argumentos en Cisco IMC con RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Aviso: NSIDE-SA-2026-003 Entrada del blog:...

CVE-2023-4220-RCE

CVE-2023-4220-RCE 摘要 Starlabs 公告 受影响产品： Chamilo , -p --port REMOTE PORT -c --comand 反向 Shell 参数 -lh/--localhost： 攻击者 IP -lp/--localtcat 监听端口...

cve-2019-11707

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 截图 文件 exploit.js - 实际利用代码，附加了saelo的util.js和Int64.js。 stager.js - 用于创建常量，附加了saelo的util.js和Int64.js。 stager.py - 使用keystone汇编指令。输出提供给stager.js。 利用概述 利用类型混淆写入类型化数组缓冲区之外（在setup中完成）。 const exploitpack =...

SpringBoot_Actuator_RCE

swagger-ui 接口 /swagger-ui.html SpringBoot env 获取 敏感信息 一 当我们直接访问 springboot 站点时,可以看到某些 password 字段填充了 1. 通过$name 可以获取明文字段 2. 配置不当导致敏感信息泄露password 打星号,而 pwd 没有打星号 参考 https://mp.weixin.qq.com/s/HmGEYRcf1hSVw9Uu9XHGsA 具体实现过程: 例如: 我们要获取 pid 参数值 "PID": "10648", POST /env HTTP/1.1 Host: 10.20.24.191:809...

MEA-Bench

MEA-Bench: Un Benchmark para Ataques de Extracción de Modelos Este repositorio proporciona un benchmark unificado para ataques de extracción de modelos, defensas, ataques adaptativos y evaluación. La interfaz pública está organizada en torno a un pequeño número de comandos portables. Los módulos...