PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

EvilWinRM-NG

EvilWinRM-NG Начало работы Чтобы вам было проще начать работу с GitLab, вот список рекомендуемых следующих шагов. Уже профи? Просто отредактируйте этот README.md и сделайте его своим. Хотите упростить? Используйте шаблон внизу! Добавьте свои файлы Создайте или загрузите файлы Добавьте файлы с...

evil-winrm

Evil-WinRM...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

b374k

b374k 쉘 3.2 이 PHP 쉘은 시스템 또는 웹 관리자가 cpanel, ssh, ftp 등을 사용하지 않고 원격 관리를 수행할 수 있는 유용한 도구입니다. 모든 작업은 웹 브라우저 내에서 이루어집니다. 기능: 파일 관리자 보기, 편집, 이름 변경, 삭제, 업로드, 다운로드, 압축 등 파일, 파일 내용, 폴더 검색 정규식 사용 가능 명령 실행 스크립트 실행 php, perl, python, ruby, java, node.js, c 바인드/리버스 쉘 연결을 통한 쉘 제공 간단한 패킷 크래프터 DBMS 연결 mysql,...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

DFIR_Resources_REvil_Kaseya

REvil 랜섬웨어 Kaseya 공급망 공격에 대응하는 DFIR 전문가를 위한 리소스 어제 Sophos와 Huntress Labs는 MSP관리형 서비스 제공업체 사이에서 인기 있는 원격 관리 제공업체인 Kaseya가 손상되어 공급망 랜섬웨어 공격을 실행하는 데 사용되었음을 확인했습니다. 많은 조직이 영향을 받았으며, 스웨덴의 CoOp 슈퍼마켓 체인은 800개 매장을 일시적으로 폐쇄해야 했습니다. 당사는 이번 주말에 이러한 공격에 대응하는 디지털 포렌식 및 사고 대응 전문가를 도울 수 있는 여러 리소스를 Github에 제공했습니...

CVE-2024-57972

저자 Tânia Silva, António Pinto, Pedro Pinto 및 Sara Paiva Device Portal 기능을 통한 HoloLens 서비스 거부 서비스 거부DoS 공격은 대상 시스템에 과부하를 가하여 점차적으로 전송된 모든 요청에 응답하지 못하게 하는 것을 목표로 합니다. 이로 인해 합법적인 사용자는 서비스에 대한 액세스 권한을 상실하게 되며, 이는 애플리케이션 도메인에 따라 해당 프로세스에 중요할 수 있습니다. 이 문제에 대해 우리는 혼합 현실MR 경험을 제공하는 HoloLens 헤드셋을 분석했습니다...

server

Ulterius: 簡単なリモート管理 サブライセンスにご興味がありますか？ 私たちのコードを自社スタックで使用したい、または社内用にリブランドしたい場合は、[email protected] までご連絡ください。 Ulterius は、リモートのWebインターフェースを介してWindowsシステムへの無制限アクセスを可能にするツールです。このプログラムを使用すると、プロセスの開始と終了、システムパフォーマンスの監視、ファイルの管理など、すべてをWebブラウザから行うことができます。 このリポジトリはサーバー側のコンポーネントです。フロントエンドについては...

CVE-2026-51650

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51650

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67884

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

CVE-2026-68425

CVE-2026-68425 concerns the Linux kernel InfiniBand MAD path (IB/mad). The vulnerability arises when kernel-handled RMPP receive processing begins reassembly for DATA responses before matching the response to an outstanding send, enabling a reordered burst to reach receive-side insertion without ...

CVE-2026-68302

CVE-2026-68302 is a Linux kernel issue in the Adjacency Management Protocol (AMT) implementation. Several AMT receive/transmit paths cache skb header pointers (ip_hdr, ipv6_hdr, eth_hdr, or AMT header) and a later helper can reallocate the skb head, making cached pointers invalid (use-after-free)...

EUVD-2026-54882

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attackers to bind their own key, hijack an administrator sessio...

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management RMM product. "We are proactively expanding protections in response to ongoing monitoring of threat actor...

SimpleHelp 5.5.x < 5.5.16 OIDC Authentication Bypass

The version of SimpleHelp running on the remote web server is 5.5.x prior to 5.5.16 or a 6.0 pre-release prior to 6.0 RC2. It is, therefore, affected by an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during...

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Phishing was the primary means of gaining initial access this quarter, appearing in over half of all Cisco Talos Incident Response Talos IR engagements - an increase from approximately a third of engagements last quarter. Attackers continued to innovate their delivery methods to evade defenses,...

CVE-2026-15427 OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...