RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

CVE-2026-90537

CVE-2026-90537 affects WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) in the file plugin/Scheduler/sendEmail.json.php . The root cause is a missing authorization check : an unauthenticated attacker can access scheduler email jobs by supplying any valid site-wide daily token...

EUVD-2026-76855

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/Scheduler/sendEmail.json.php that allows unauthenticated attackers to access scheduler email jobs by providing a site-wide daily token. Attackers can enumerate scheduler...

SharpMove

SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath root@kitploit: SharpMove.exe action=que...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...

persistence-info.github.io

El repositorio intenta recopilar información sobre los mecanismos de persistencia de Windows para hacer que la protección/detección sea más eficiente. La mayor parte de la información es bien conocida desde hace años y se utiliza activamente en diversos escenarios. Espera más. Hago todo lo posibl...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...

WPTaskScheduler_CVE-2024-49039

WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2026-89521

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89521 sched/core: Handle pick_task() releasing the rq lock

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Denegación de servicio cuadrática en htmlsanitizeex 1.5.3. La biblioteca existe para neutralizar HTML no confiable, pero dos rutas de código superlineales independientes permiten que una única solicitud manipulada sature un planificador BEAM durante segundos...

CVE-2021-21425

CVE-2021-21425 - GravCMS Unauthenticated RCE Improved proof-of-concept for CVE-2021-21425, an unauthenticated Remote Code Execution vulnerability in GravCMS = 1.10.7 via arbitrary YAML write to the scheduler. Credit This is derivative work. The vulnerability and the original exploit are not mine...

Quartz-1

To compile: % mvn install -DskipTests Note: a. the final Quartz jar is found under quartz/target b. if you don't have Oracle and/or Weblogic third party libraries jars required for compilation these can't be found on public Maven repos due to licensing you can comment out those modules under the...

CVE-2022-0540-RCE

Atlassian Jira Seraph 认证绕过远程代码执行漏洞（CVE-2022-0540） 利用细节 根据漏洞作者文章的描述，atlassian 官方发布了一个很长的受影响的插件的列表（绝大部分是误报），而作者给出了几个实际受影响的插件名称 根据提示的利用条件，结合 WBS Gantt-Chart for Jira 插件的 官方文档 本质上就是利用 job scheduler 模块 Task 的 Beanshell Script 实现 RCE，利用过程如下 1. （为方便操作）使用 Burp 代理的替换功能 Proxy Options Match and Replace 新建规则...

FullPowers

FullPowers FullPowers is a Proof-of-Concept tool I made for automatically recovering the default privilege set of a service account including SeAssignPrimaryToken and SeImpersonate. Rationale On Windows, some services executed as LOCAL SERVICE or NETWORK SERVICE are configured to run with a...

exploits

exploits Los PoC publicados se pueden encontrar en exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

DEBIAN-CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...