CVE-2023-23192

CVE-2023-23192 CVE-2023-23192 - Userlock - Omisión de la autenticación multifactor MFA Título del exploit: Userlock - Omisión de la autenticación multifactor MFA Fecha: 01/11/2023 Autor del exploit: Pinar Sadioglu Página web del fabricante: https://www.isdecisions.com/products/userlock/help/...

ScheduleRunner

ScheduleRunner - 一个具有更高灵活性的C工具，用于定制红队操作中的计划任务，以支持持久化和横向移动 计划任务是过去十年中最流行的攻击技术之一，如今黑客/红队成员仍常将其用于持久化和横向移动。 已有多种C工具被开发出来模拟使用计划任务的攻击。我尝试过其中一些，但每个工具在定制计划任务方面都有其局限性。因此，本项目旨在提供一个C工具（兼容CobaltStrike的execute-assembly），包含我所需要的功能，并提供足够的灵活性来定制计划任务。 截图： 方法 /method: 方法| 功能 ---|--- create| 创建一个新的计划任务 delete|...

CVE-2025-60710

CVE-2025-60710 这是 \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration 计划任务中本地权限提升漏洞的概念验证（PoC）。 当该计划任务启动时，taskhostw.exe 进程会尝试打开 C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP 目录，并使用以下过滤器搜索子目录：????????-????-????-????-????????????。如果找到该目录，将直接删除，而不会检查符号链接。 低权限用户默认可以在其自己的 %LOCALAPPDATA%...

pyGPOAbuse

pyGPOAbuse 由 D4RKMATT3R 添加的过滤器功能 免责声明：此功能仅在本地 AD 环境中进行了简要测试。对于任何未预见的行为或故障，我不承担任何责任。本工具按原样提供，仅用于授权测试，完全由您自行承担风险。 现在支持类似 SharpGPOAbuse 的基于过滤器的用户或主机定位。 场景：GPO 链接到 Active Directory 域，因此任务将应用于该域内的所有受影响对象（用户/主机），这会产生大量不必要的噪音和痕迹。因此，更推荐采用针对性方法，例如仅在域控制器上执行命令。 root@kitploit: 通过过滤器进行主机/用户定位（类似 SharpGPOAbuse...

GhostTask

Ghost 计划任务 受 WithSecure 关于 计划任务篡改 的研究启发，他们解释了仅通过注册表键操作创建计划任务的可行性。这种方法可以绕过计划任务创建事件日志（如 4698 和 106）的生成，从而提供更隐蔽的持久化方式。基于这些见解，我开发了这个 POC，演示如何通过直接操作注册表来创建计划任务。 创建一个新的计划任务需要添加多个注册表键及其关联的值。由于与计划任务相关的注册表值的结构未公开记录，我构建这些结构的方法主要依赖于反复试验，并通过与合法计划任务的注册表值进行对比来指导。此外，我还参考了 Taskschd.h 头文件中的接口，并大量借鉴了 Cyber.WTF 的...

CVE-2025-60710

CVE-2025-60710 Este es un PoC para la vulnerabilidad de escalada de privilegios local en la tarea programada \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Cuando se inicia esta tarea programada, el proceso taskhostw.exe intentará abrir el directorio...

CVE-2026-85040

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040 ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2026-85040

ZhongBangKeJi CRMEB (up to 6.0.0 ) is vulnerable to OS command injection in the Custom Scheduled Task feature. The eval function in /adminapi/system/crontab/save unsafely processes the customCode argument, allowing remote attackers to inject operating-system commands. The vendor documents this as...

Malicious code in mfacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8426c0e4e80e0bd9839d8517e060bd923775b8a3e100aab57e18b4f47c970e On require'mfacord', index.js loads lib/cache.js, which on win32 decodes a hardcoded URL...

Astra Linux – Vulnerability in Firefox and Thunderbird

During operations on MessageTasks, a task may be removed while it is still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.15, Thunderbird 91.2, Firefox ESR 91.2, Firefox ESR 78.15, and Firefox 93...

PT-2026-71690

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-17598

CVE-2026-17598 affects Sonatype Nexus Repository 3. The issue is improper input validation in scheduled task configuration: internal configuration keys from user-supplied task properties are not properly filtered when creating/updating a scheduled task via the admin UI. A user with permission to ...

Malicious code in crypto-validate-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaq...

MAL-2026-10586 Malicious code in crypto-validate-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaq...

MAL-2026-10591 Malicious code in solana-key-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b4680547530fce361014fe8c228734a8ec33bc8c834f46285e371e8f6b9f92 On require, index.js waits 37 seconds, reads test/fixtures/keypairs.dat a 53KB base64 blob disguised as a test fixture, no test harness references it...

CVE-2026-15499

AstrBotDevs AstrBot (versions up to 4.25.2) contains a vulnerability in the function FutureTaskTool.call (astrbot/core/tools/cron_tools.py). Manipulating payload["note"] leads to improper authorization, enabling remote exploitation. Public exploit availability is reported. No remediation details ...