4483 matches found
Quartz-1
To compile: % mvn install -DskipTests Note: a. the final Quartz jar is found under quartz/target b. if you don't have Oracle and/or Weblogic third party libraries jars required for compilation these can't be found on public Maven repos due to licensing you can comment out those modules under the...
RedPersist
RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...
SharpMove
SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath SharpMove.exe action=query...
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...
kernel: ipvs: clear the svc scheduler ptr early on edit
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. During the ipvseditservice operation, the svc-scheduler pointer is cleared too late when unbinding an old scheduler. This improper handling allows packets to access previously freed scheduler data, leading to a use-after-fre...
apache__dolphinscheduler_CVE-2023-49109_3-2-0
Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...
fuzztruction
Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...
apache__dolphinscheduler_CVE-2023-51770_3-2-00
Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...
CVE-2022-0540-RCE
Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540） English • 中文 Exploit Details As seen in author's blog, atlassian provided a long list of affected plugins the vast majority of which were false positives, and the author listed several actual affected plugins According to the prompted...
wptsextensions.dll
Task Scheduler の DLL ハイジャックを悪用するための WptsExtensions.dll （ 修正予定なし ） x64 Visual Studio の環境変数を読み込みます： "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" TCHAR script 変数を、DLL が検索される書き込み可能な SYSTEM パスに更新します。 そのようなパスを見つけるには、この ツール を確認してください。...
WPTaskScheduler_CVE-2024-49039
WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...
CVE-2026-43655-AppleM2ScalerCSCDriver-UAF
CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...
cve-2024-49039-task_scheduler_eop_reproduction
CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...
the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex
CVE-2026-68749 / CVE-2026-68750 — PoC Quadratic denial of service in htmlsanitizeex run of word chars with a trailing : CVE-2026-68750| HtmlSanitizeEx.Traverser.traverse/2| CWE-407 quadratic traversal| flat run of allowed sibling tags e.g. a × 20,000 CVE-2026-68749 is only reachable via html5/1 o...
persistence-info.github.io
The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...
FullPowers
FullPowers FullPowers is a Proof-of-Concept tool I made for automatically recovering the default privilege set of a service account including SeAssignPrimaryToken and SeImpersonate. Rationale On Windows, some services executed as LOCAL SERVICE or NETWORK SERVICE are configured to run with a...
CVE-2025-56799
CVE-2025-56799 OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary
👤 Author Mohammed Idrees Banyamer Security Researcher 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2026-25939 , a critical authorization bypass vulnerability in FUXA open-source SCADA/ICS software. The vulnerability allows unauthenticated remote attackers to create,...