313 matches found
gha-lab-00d54c717d
자동화된 연구 산출물 — 업스트림 프로젝트가 아님. 이 저장소는 Université Laval의 석사 논문을 위해 GitHub Actions 워크플로우 취약점 재현을 목적으로 자동화된 하네스가 구축한 일회용 실험실입니다. 이는 커밋 1903b2f9677e7104c5f64dd5bd1a72db130f143e 2026-05-17 시점의 duck-organization/questbot의 축어적 스냅샷이며, 해당 프로젝트의 자체 라이선스에 따라 재배포됩니다. 해당 라이선스 파일은 이 스냅샷에 변경 없이 포함되어 있습니다. 업스트림...
CyberRange
개요: 이 CyberRange 프로젝트는 세계 최초의 오픈소스 CyberRange 청사진을 나타냅니다. 이 프로젝트는 AWS Cloud를 사용하여 사설 연구소에서 완벽한 공격, 방어, 리버스 엔지니어링 및 보안 인텔리전스 도구를 위한 부트스트랩 프레임워크를 제공합니다. 이 프로젝트에는 취약한 시스템과 침투 테스터, 개발자, 악성코드 분석가, 포렌식/리버스 엔지니어, 위협 헌터 등에게 알려진 가장 강력한 오픈소스/커뮤니티 에디션 도구의 툴킷이 포함되어 있습니다. 시작하기 액세스 권한을 얻으려면 AWS 계정 번호를 보내주셔야 30...
gha-lab-fb32aba4a3
자동화된 연구 산출물 — 업스트림 프로젝트가 아님. 이 저장소는 Université Laval의 석사 논문을 위해 자동화된 하네스가 구축한 일회용 실험실로, 공개된 GitHub Actions 워크플로우 취약점을 재현하기 위한 것입니다. 이는 커밋 dcd0da67f3cd6ffe39c754795ce4f6801244162e2023-02-16 시점의 cocos/cocos-engine을 그대로 스냅샷한 것이며, 해당 프로젝트의 자체 라이선스에 따라 재배포되며, 해당 라이선스 파일은 이 스냅샷에 변경 없이 포함되어 있습니다. 업스트림...
New Aeternum C2 Botnet Evades Takedowns via Polygon Blockchain
Qrator Research Lab has identified Aeternum C2, a botnet that uses the Polygon blockchain for commands, making it nearly impossible to shut down...
Intel® OFU Software Advisory
Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...
Binwalk 2.3.2 Remote Command Execution
Exploit Title: Binwalk v2.3.2 - Remote Command Execution RCE Exploit Author: Etienne Lacoche CVE-ID: CVE-2022-4510 import os import inspect import argparse print"" print"" print"------------------CVE-2022-4510----------------" print"" print"--------Binwalk Remote Command Execution--------"...
Binwalk v2.3.2 - Remote Command Execution (RCE)
Exploit Title: Binwalk v2.3.2 - Remote Command Execution RCE Exploit Author: Etienne Lacoche CVE-ID: CVE-2022-4510 import os import inspect import argparse print"" print"" print"------------------CVE-2022-4510----------------" print"" print"--------Binwalk Remote Command Execution--------"...
Code injection in `saved_model_cli` in TensorFlow
Impact TensorFlow's savedmodelcli tool is vulnerable to a code injection: savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./ --tagset serve --signaturedef servingdefault This can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...
Redragon Gaming Mouse - (REDRAGON_MOUSE.sys) Denial Of Service Exploit
Exploit Title: Redragon Gaming Mouse - 'REDRAGONMOUSE.sys' Denial-Of-Service PoC Exploit Author: Quadron Research Lab Version: all version Tested on: Windows 10 x64 HUN/ENG Professional Vendor: https://www.redragonzone.com/pages/download Reference:...
Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC)
Exploit Title: Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service PoC Date: 2021/04/07 Exploit Author: Quadron Research Lab Version: all version Tested on: Windows 10 x64 HUN/ENG Professional Vendor: https://www.yenkee.eu/gaming-mouse-hornet-aim/yms-3029 Reference:...
Yenkee Hornet Gaming Mouse - (GM312Fltr.sys) Denial Of Service Exploit
Exploit Title: Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial-Of-Service PoC Exploit Author: Quadron Research Lab Version: all version Tested on: Windows 10 x64 HUN/ENG Professional Vendor: https://www.yenkee.eu/gaming-mouse-hornet-aim/yms-3029 Reference:...
Yenkee Hornet Gaming Mouse Denial Of Service
Exploit Title: Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial-Of-Service PoC Date: 2021/04/07 Exploit Author: Quadron Research Lab Version: all version Tested on: Windows 10 x64 HUN/ENG Professional Vendor: https://www.yenkee.eu/gaming-mouse-hornet-aim/yms-3029 Reference:...
CVE-2021-32698
CVE-2021-32698 affects the eLabFTW open source electronic lab notebook. The issue is a blind server-side request forgery (SSRF) that lets an attacker cause the server to issue GET requests on behalf of the server, without the attacker seeing the response. The vulnerability is mitigated by a patch...
Cisco RV34X系列 权限提升漏洞（CVE-2021-1520）
Advisory: Cisco RV34X Series - Privilege Escalation in vpnTimer May 5, 2021 |In Research |By [email protected] TL;DR A few weeks ago, we published an advisory on the Cisco RV series routers, where we outlined the root cause for authentication bypass and remote command execution issues...
Cisco RV Authentication Bypass / Code Execution
IoT Inspector Research Lab Security Advisory IOT-20210414-0 title: Cisco RV series Authentication Bypass and Remote Command Execution vendor/product: Cisco https://www.cisco.com/ vulnerable version: RV16X/RV26X: 1.0.01.02 & below. RV34X: 1.0.03.20 & below. fixed version: RV16X/RV26X: 1.0.01.03...
Concrete5 8.5.4 Cross Site Scripting
Exploit Title: Concrete5 8.5.4 - 'name' Stored XSS Date: 2021-01 Exploit Author: Quadron Research Lab Version: Concrete5 8.5.4 Tested on: Windows 10 x64 HUN/ENG Professional Vendor: Concrete5 CMS https://www.concrete5.org CVE: CVE-2021-3111 Suggested description The Express Entries Dashboard...
Concrete5 8.5.4 - 'name' Stored XSS
Exploit Title: Concrete5 8.5.4 - 'name' Stored XSS Date: 2021-01 Exploit Author: Quadron Research Lab Version: Concrete5 8.5.4 Tested on: Windows 10 x64 HUN/ENG Professional Vendor: Concrete5 CMS https://www.concrete5.org CVE: CVE-2021-3111 Suggested description The Express Entries Dashboard...
Debian Security Advisory DSA 3926-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...
CentOS 7 : firefox (CESA-2017:0558)
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...