CVE-2024-49113

LDAP Nightmare Yuki Chen@guhe120이 보고한 CVE-2024-49113에 대한 익스플로잇입니다. Windows 경량 디렉터리 액세스 프로토콜LDAP의 취약점입니다. SafeBreach Labs에서 제작했습니다2025년 1월 1일 게시. 취약점에 대한 전체 기술 분석 및 익스플로잇 방법은 블로그 게시물 여기에서 확인하세요. 개요 CVE-2024-49113은 Microsoft에 따르면 원격 코드 실행을 허용하는 Windows LDAP 클라이언트의 치명적인 취약점입니다. 이 익스플로잇은 Netlogon 원격...

CVE-2026-24061

CVE-2026-24061 Telnet RCE 익스플로잇 - SafeBreach Labs 제작 이 스크립트는 형식이 잘못된 USER 환경 변수를 사용하여 Telnet 서버의 CVE-2026-24061 취약점을 악용합니다. 사용법 대상 호스트로 스크립트를 실행합니다: root@kitploit: python telnetrce.py -p 인수 host: 대상 IP 주소 또는 호스트 이름 필수 -p, --port: 대상 포트 기본값: 23 예제 root@kitploit: python telnetrce.py 192.168.1.100...

pinjectra

Pinjectra Pinjectra ist eine C/C++-Bibliothek, die Process-Injection-Techniken mit Fokus auf Windows 10 64-Bit in einem "Mix-and-Match"-Stil implementiert. Hier ein Beispiel: root@kitploit: // CreateRemoteThread Demo + DLL Load i.e., LoadLibraryA as Entry Point executor = new...

EUVD-2019-15712

Malware in sbrugna...

CVE-2019-6145

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach La...

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...

Exploit for Integer Overflow or Wraparound in Microsoft

PoC exploit for CVE-2024-49112 is uncertain. It is an offensive...

Exploit for Out-of-bounds Read in Microsoft

PoC exploit for CVE-2024-49113, a Windows Server vulnerability...

Exploit for Integer Overflow or Wraparound in Microsoft

PoC exploit for CVE-2024-49113, a Windows Server vulnerability...

PoolParty - A Set Of Fully-Undetectable Process Injection Techniques Abusing Windows Thread Pools

A collection of fully-undetectable process injection techniques abusing Windows Thread Pools. Presented at Black Hat EU 2023 Briefings under the title - injection-techniques-using-windows-thread-pools-35446"The Pool Party You Will Never Forget: New Process Injection Techniques UsingWindows Thread...

New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw

A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with the goal of delivering Formbook malware. "The attachments represent an escalation ...

Confluence on Windows was vulnerable to DLL hijacking - CVE-2019-20406

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a dll file in a directory in the global path environmental variable variable to inject code & escala...

Confluence on Windows was vulnerable to DLL hijacking - CVE-2019-20406

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a dll file in a directory in the global path environmental variable variable to inject code & escala...

CVE-2019-6145

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach La...

CVE-2019-6145

CVE-2019-6145 affects Forcepoint VPN Client for Windows versions before 6.6.1. The flaw is an unquoted search path that can be exploited locally to escalate privileges to NT AUTHORITY\SYSTEM. It relies on an attacker having local access with write permissions to two locations: C:\Program.exe and ...

Debian Security Advisory DSA 3849-1 (kde4libs - security update)

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-6410 Itzik Kotler, Yonatan Fridburg and Amit Klein of Safebreach Labs reported that URLs are not sanitiz...