5045 matches found
cve-2024-49039-task_scheduler_eop_reproduction
CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...
CVE-2026-121809
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...
wptsextensions.dll
WptsExtensions.dll for exploiting Task Scheduler DLL Hijacking "won't fix " Load x64 visual studio environnement variables: "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" Update the TCHAR script variable with a writable SYSTEM path where the DLL will...
CVE-2026-121809 CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...
CVE-2026-121809
The elixir-grpc ecosystem is vulnerable to a CPU exhaustion attack due to a Loop with Unreachable Exit Condition in the grpc_server (versions 1.0.0 to 1.1.0) and grpc (versions 0.3.1 to 1.0.0) components. Specifically, the GRPC.Server.Adapters.Cowboy.read_stream/1 function fails to correctly hand...
fuzztruction
Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...
RedPersist
RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...
CVE-2022-0540-RCE
Atlassian Jira Seraph Authentication Bypass RCEļ¼CVE-2022-0540ļ¼ English ā¢ äøę Exploit Details As seen in author's blog, atlassian provided a long list of affected plugins the vast majority of which were false positives, and the author listed several actual affected plugins According to the prompted...
WPTaskScheduler_CVE-2024-49039
WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...
apache__dolphinscheduler_CVE-2023-49109_3-2-0
Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...
CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary
š¤ Author Mohammed Idrees Banyamer Security Researcher š Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2026-25939 , a critical authorization bypass vulnerability in FUXA open-source SCADA/ICS software. The vulnerability allows unauthenticated remote attackers to create,...
FUXA - Authorization Bypass
FUXA 1.2.8 through 1.2.10 contains an authorization bypass caused by improper access control in scheduler management, letting unauthenticated remote attackers create and modify schedulers, exploit requires no authentication. id: CVE-2026-25939 info: name: FUXA - Authorization Bypass author:...
SharpMove
SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath SharpMove.exe action=query...
persistence-info.github.io
The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...
CVE-2026-71363
A flaw in AWX allows an unauthenticated remote attacker to access specific debug API endpoints, including /api/debug/task_manager/ , /api/debug/dependency_manager/ , and /api/debug/workflow_manager/ . These endpoints are registered unconditionally in the URL configuration and utilize the AllowAny...
CVE-2026-71363 Awx: unauthenticated debug endpoints trigger scheduler operations
A flaw was found in AWX. The debug API endpoints /api/debug/taskmanager/, /api/debug/dependencymanager/, /api/debug/workflowmanager/ are registered unconditionally in the URL configuration and use AllowAny permission class with ignoremodelpermissions=True. This allows an unauthenticated remote...
exploits
exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...
CVE-2025-56799
CVE-2025-56799 OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
apache__dolphinscheduler_CVE-2023-51770_3-2-00
Apache Dolphinscheduler About Apache DolphinScheduler is a modern data orchestration platform that empowers agile, low-code development of high-performance workflows. It is dedicated to handling complex task dependencies in data pipelines, and provides a wide range of built-in job types out of th...
InfinityCore-Android-CVE-2026-98385
InfinityCore Android ā CVE-2026-98385 Scheduler Chinese Overview ARM64 implementation of the Infinity Core series Scheduler subsystem vulnerability. The target kernel is the official test form of this CVE 7.0 / 7.2 series. The mechanism, race timing, and heap layout are fully ported according to...