TaskHound

Outil de découverte de tâches planifiées privilégiées Windows pour le plaisir et le profit. TaskHound traque les tâches planifiées Windows qui s'exécutent avec des comptes privilégiés et des identifiants stockés. Il énumère les tâches via SMB, analyse les XMLs et identifie les opportunités...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX В августе 2025 года в модуле Endpoint FreePBX была раскрыта критическая уязвимость. CVE-2025–57819 позволяет неаутентифицированному злоумышленнику использовать SQL-инъекцию в модуле Endpoint и через цепочку манипуляций с базой данных и выполнения запланированных задач добитьс...

SharpStay

SharpStay - .NET 지속성 빌드 컴파일하려면 Visual Studio 프로젝트를 열고 릴리스용으로 컴파일하세요. 옵션 상승된 레지스트리 키 상승된 UserInit 레지스트리 키 상승된 예약 작업 상승된 서비스 생성 상승된 WMI 이벤트 구독 비상승 InitMprLogonScript 레지스트리 키 비상승 예약 작업 COM 핸들러 하이재킹 비상승 정션 폴더 기타 예약 작업 동작 추가 기타 시작 디렉터리 기타 새 LNK 기타 백도어 LNK 기타 작업 이름 기타 예약 작업 나열 기타 실행 중인 서비스 나열 기타 예약 작업...

WMIExec

WMIexec Ensemble de scripts Python qui réalisent différentes façons d'exécuter des commandes via le protocole WMI. Article de blog https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Utilisation wmiexecscheduledjob.py Est un script Python qui s'authentifie auprès d'un...

NorkNork

NorkNork - Outil pour identifier les payloads de persistance Empire https://www.n00py.io/2017/01/removing-backdoors-powershell-empire-edition/ À PROPOS : Ce script a été conçu pour identifier les payloads de persistance Powershell Empire sur les systèmes Windows. Il prend actuellement en charge l...

CVE-2026-86177

Pterodactyl Panel versions before 1.14.1 fail to validate action-specific permissions when creating scheduled tasks. A subuser holding only the schedule.update permission can create and immediately trigger scheduled tasks that execute arbitrary game-server console commands , control server power ...

EUVD-2026-71976

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

SharpPolarBear

SharpPolarBear Ceci est une version armée de l'un des exploits publiés par SandboxEscaper depuis ici https://github.com/SandboxEscaper/polarbearrepo. La plupart du code provient du dépôt CollectorService de rasta-mouse https://github.com/rasta-mouse/CollectorService. J'ai simplement converti le...

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

🔍 CVE-2026-3502 Scanner — инструмент обнаружения уязвимости TrueConf ⚠️ ПРЕДУПРЕЖДЕНИЕ Только для образовательных целей и авторизованного тестирования. 📋 Описание Инструмент обнаружения для CVE-2026-3502. Сканирует серверы TrueConf без проверки обновлений, обнаруживает уязвимые клиенты Windows...

CVE-2026-73533

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

EUVD-2026-58112

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

CVE-2026-73533

CVE-2026-73533 affects Ninja Tables Pro 5.2.11. The vulnerability is an embedded malicious code issue introduced via a tampered plugin build served through a decommissioned update server. A rogue file, app/Library/updater/NinjaTableDataSync.php, creates a backdoor REST API endpoint and drops pers...

PT-2026-71689

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a require once directive added to fluentformpro.php...

EUVD-2026-55022

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

EUVD-2026-54517

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-6079

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

EUVD-2026-53174

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

VulnCheck KEV: CVE-2026-73533

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...