SharpMove

SharpMove - .NET 인증된 원격 호스트 실행 빌드 컴파일하려면 Visual Studio 프로젝트를 열고 릴리스용으로 컴파일하십시오. 옵션 WMI SCM DCOM 다중 작업 스케줄러 서비스 DLL 하이재킹 DCOM 서버 하이재킹 예약 작업 수정 서비스 binpath 수정 SharpMove.exe action=query computername=remote.host.local query="select from win32process" username=domain\user password=password...

RedPersist

RedPersist RedPersist는 C으로 작성된 Windows 지속성 도구입니다. 프로젝트 컴파일 이 프로젝트에서는 아래의 서드파티 라이브러리가 사용됩니다. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Visual Studio 프로젝트를 로드하고 "도구" "NuGet 패키지 관리자" "패키지 관리자 설정"으로 이동합니다. "NuGet 패키지 관리자" "패키지 소스"를 엽니다. Fody 설치...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler 소개 Apache DolphinScheduler는 민첩하고 로우 코드 방식의 고성능 워크플로우 개발을 지원하는 현대적인 데이터 오케스트레이션 플랫폼입니다. 데이터 파이프라인의 복잡한 작업 종속성을 처리하는 데 중점을 두며, 즉시 사용 가능한 다양한 내장 작업 유형을 제공합니다. DolphinScheduler의 주요 기능은 다음과 같습니다: 쉬운 배포: Standalone, Cluster, Docker, Kubernetes를 포함한 네 가지 배포 모드를 제공합니다. 사용하기 쉬움: We...

WordPress Integration for Epos Now and WooCommerce plugin 4.6.0-4.11.1 - Unauthenticated Action Scheduler Queue Disclosure vulnerability

Unauthenticated Action Scheduler Queue Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin Integration for Epos Now and WooCommerce versions 4.6.0-4.11.1...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler 소개 Apache DolphinScheduler는 민첩하고 로우코드 방식의 고성능 워크플로우 개발을 가능하게 하는 현대적인 데이터 오케스트레이션 플랫폼입니다. 데이터 파이프라인의 복잡한 작업 종속성을 처리하는 데 전념하며, 즉시 사용 가능한 다양한 내장 작업 유형을 제공합니다. DolphinScheduler의 주요 기능은 다음과 같습니다: 배포가 용이하며, Standalone, Cluster, Docker 및 Kubernetes를 포함한 네 가지 배포 모드를 제공합니다. 사용하기 쉬우...

CVE-2026-103323 Integration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue Disclosure

The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perform an authorization check on one of its REST endpoints, allowing unauthenticated users to retrieve the site's scheduled background tasks and their arguments, which include order identifiers and, when...

CVE-2026-103323

The Integration for Epos Now and WooCommerce WordPress plugin (versions 4.6.0-4.11.1 ) is vulnerable to an unauthenticated Action Scheduler Queue Disclosure vulnerability. The root cause is a missing authorization check on one of the plugin's REST endpoints. This allows unauthenticated users to r...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2022-0540-RCE

Atlassian Jira Seraph 认证绕过远程代码执行漏洞（CVE-2022-0540） 利用细节 根据漏洞作者文章的描述，atlassian 官方发布了一个很长的受影响的插件的列表（绝大部分是误报），而作者给出了几个实际受影响的插件名称 根据提示的利用条件，结合 WBS Gantt-Chart for Jira 插件的 官方文档 本质上就是利用 job scheduler 模块 Task 的 Beanshell Script 实现 RCE，利用过程如下 1. （为方便操作）使用 Burp 代理的替换功能 Proxy Options Match and Replace 新建规则...

WPTaskScheduler_CVE-2024-49039

WPTaskScheduler 지속성 및 CVE-2024-49039, Task Scheduler의 공격 표면 중 하나. WPTaskScheduler.dll은 win 10 1507부터 Task Scheduler의 구성 요소입니다. 보안 연구자들이 분석한 결과, 이는 지속성에 사용되는 백도어 도구로 추정됩니다. 연구진은 이 도구가 제한된 토큰 샌드박스, 자식 프로세스 제한을 우회하고 Medium Integrity로 상승시킬 수 있음을 발견했습니다. ??? 1: RPC 연결을 설정하지만, Google Chrome 렌더러 프로세스와 같...

CVE-2026-98180

In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msmringbuffer and struct msmgemvm embed a struct drmgpuscheduler. msmringbufferdestroy and the VM free callback msmgemvmfree call drmschedfini on the...

CVE-2026-105756

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a non-empty cachesalt value without enforcing the character and length restrictions required by the IPCCacheServerKey consumer in LMCache-MP. On deployments using the...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

Quartz-1

컴파일하려면: % mvn install -DskipTests 참고: a. 최종 Quartz jar는 quartz/target에서 찾을 수 있습니다. b. 컴파일에 필요한 Oracle 및/또는 Weblogic 서드파티 라이브러리 jar가 없는 경우라이선스로 인해 공개 Maven 저장소에서 찾을 수 없음 메인 pom.xml에서 해당 모듈을 주석 처리하거나 필요한 아티팩트를 다운로드하여 설치할 수 있습니다. Oracle: ojdbc5.jar는...

kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation

A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: sched: cake: Fixed an issue where a null pointer access occurred when cakeinit failed. When the default qdisc is cake, if the qdisc of devqueue fails to initialize during mqprioinit, cakereset is called to clear resources...

kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation

A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...

kernel: ipvs: clear the svc scheduler ptr early on edit

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. During the ipvseditservice operation, the svc-scheduler pointer is cleared too late when unbinding an old scheduler. This improper handling allows packets to access previously freed scheduler data, leading to a use-after-fre...