3761 matches found
ReplicatedRandom
Node MWC1616 Consulta el README en la carpeta node Java LCG Dado un double generado por nextDouble de un java.util.Random, recrea un Random con el mismo estado. Este ReplicatedRandom se puede usar entonces para predecir los valores futuros del Random original. Ejemplo: root@kitploit: Random r = n...
WinRAR-Vulnerability-recurrence-tutorial
winrar漏洞复现教程 WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现 漏洞信息 WinRAR 6.23 or WinRAR =6.22 参考链接： https://cn-sec.com/archives/1980228.html https://xxb.ecust.edu.cn/2023/0904/c8463a158425/page.htm 免责声明： 使用风险： 本工具仅供学习和技术研究目的使用。使用者应理解并接受使用该工具可能带来的风险和后果。 法律合规：...
CVE-2022-28219-Like
CVE-2022-28219-Like 建立一個概念類似 CVE-2022-28219 的測試環境...
CVE-2023-27532
CVE-2023-27532 PoC para CVE-2023-27532 que afecta a Veeam Backup and Replication Análisis técnico En nuestro blog se puede encontrar un análisis técnico de la causa raíz de la vulnerabilidad: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Resumen Este PoC abusa de u...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
ADSpider
d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 /// ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888 888 888 888 888 888...
CVE-2019-19470-RedTeamRD
CVE-2019-19470-RedTeamRD 此仓库包含用于复现由CODEWHITE发现的CVE-2019-19470漏洞利用的代码和说明。这里提供了我在HackTheBox meetup上使用的示例源代码，用以解释我学习并创建此漏洞利用的过程。 Named Pipe Client and Server Example 1 Named Pipe Client and Server Example 2 Descompilación Example Comandos de WinDbg Código para modificación del PEB Exploit -...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...
Veeam Backup & Replication - Unauthenticated
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...
WebSecurityProject
WebSecurityProject Análisis y replicación de CVE-2022-23988 y CVE-2022-34265...
cve-2026-6471-postgres-logical-decoding-dlopen
PostgreSQL CVE-2026-6471: decodificación lógica dlopen de una biblioteca arbitraria La decodificación lógica de PostgreSQL permite que un rol que no es superusuario y que posee el privilegio REPLICATION cree un slot de replicación lógica y elija el plugin de salida. En las versiones afectadas no...
Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover
Vulnerability ZooKeeperReplicationConfig.secret silently substitutes the hard-coded constant "ch4n63m3" leetspeak for "change me" whenever the operator omits replication.secret. The same secret is wired into both the client-facing SASL context and the quorum/learner SASL contexts of the embedded...
EUVD-2026-38207
Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync Referencia: https://adsecurity.org/?p=1729 Referencia: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Objetivo: recuperar los hashes de contraseñas de todas las cuentas de usuario en un controlador de dominio utilizando la función DCSync de...
CVE-2021-27905
CVE-2021-27905 No.| Título ---|--- 1| Resumen 2| Causa raíz 3| Prueba de concepto 4| Mitigación 8.8.2+ 5| Referencia Para fines educativos y de investigación únicamente. No utilices este código en sistemas que no poseas o para los que no tengas permiso explícito de prueba. No soy responsable de...
Linux Distros Unpatched Vulnerability : CVE-2026-82062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by...
EUVD-2026-72949
A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...
Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release
Red Hat OpenShift distributed tracing platform Tempo 3.11.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: High availability defaults for TempoStack deployment sizes: Before...
