SharpMove

SharpMove - 对远程主机进行 .NET 认证执行 编译 要编译，请打开 Visual Studio 项目并编译为发布版本。 选项 WMI SCM DCOM 多种 任务计划程序 服务 DLL 劫持 DCOM 服务器劫持 修改计划任务 修改服务 binpath SharpMove.exe action=query computername=remote.host.local query="select from win32process" username=domain\user password=password SharpMove.exe action=create...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

EUVD-2026-94312

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-107151

The smart_proxy_dynflow Ruby gem contains a missing authentication vulnerability in remote-execution task updates. When remote execution is configured in pull or pull-mqtt mode, the progress and completion callbacks accept reports even if the one-time token is missing. An attacker who knows a run...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

MaccaroniC2

MaccaroniC2 - 使用AsyncSSH赋能命令与控制 MaccaroniC2 是一个 概念验证 的命令与控制框架 ，它利用了强大的 AsyncSSH Python 库，该库提供了 SSHv2 协议的异步客户端和服务器实现，并使用 PyNgrok 封装来集成 ngrok。此工具针对一个特定场景设计：受害者在受控机器上运行 AsyncSSH 服务器并建立到外部的隧道，等待攻击者发送命令。 攻击者利用 Ngrok 官方 API 获取隧道的主机名和端口以建立连接。这种方法充分利用了 AsyncSSH 提供的全面能力，包括对 SFTP 和 SCP...

nimux

纯 Nim 网络枚举与远程执行工具包 nimux - 原生操作员工具包 nimux 是用于授权安全评估的原生命令界面。它将网络枚举、轻量级 Web 发现、凭据验证、Active Directory 操作、Kerberos 工作流、远程执行、文件传输、机密收集、DCSync、GPO 操作、数据库客户端和 SOCKS 路由整合到一个纯 Nim 工具包中。 当前版本：v1.0.6 您正在访问 nimux 的官方公共仓库。 网站：https://nimux.wiki 文档：https://docs.nimux.wiki 源码：https://github.com/blue0x1/nimux 声明...

smbexec

smbexec 使用 Samba 工具快速执行 psexec 风格攻击 原始概念和脚本由 Brav0Hax 和 PureHate 编写 移植至 Ruby 并由 Smilingraccoon 和 Zeknox 修改 代号 - 马基雅维利 编写原因：我们厌倦了 Metasploit PSExec 被触发的情况 特别感谢 Carnal0wnage，他的博客启发我们选择了这条路径。 http://carnal0wnage.attackresearch.com/2012/01/psexec-fail-upload-and-exec-instead.html v2.0 - 2013/10/17 更新...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd命令执行 ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013 . drwxr-xr-x 16 0 0 0...

gargamel

Gargamel 编译 已使用 Rust 1.50+ 完成编译和测试。 在项目目录中打开终端，输入以下命令编译 release 版本： cargo build --release 调试版本可使用以下命令编译： cargo build 编译后的可执行文件分别位于 target/release/gargamel.exe 或 target/debug/gargamel.exe。 设置日志级别 如果希望更改日志级别： 打开 src/main.rs 在第 42 和 43 行，将 LevelFilter::Info 改为（例如）LevelFilter::Trace 以获得更详细的日志。 注意...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution

n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...

Advantech R-SeeNet 2.4.12 - OS Command Injection

Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...

MajorDoMo thumb.php - OS Command Injection

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. id: CVE-2023-50917 info: name: MajorDoMo thumb.php - OS Command Injection author: DhiyaneshDK severity: critical...

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...