FullPowers

FullPowers FullPowers é uma ferramenta de Prova de Conceito que fiz para recuperar automaticamente o conjunto de privilégios padrão de uma conta de serviço, incluindo SeAssignPrimaryToken e SeImpersonate. Fundamentação No Windows, alguns serviços executados como LOCAL SERVICE ou NETWORK SERVICE s...

CVE-2022-0540-RCE

Atlassian Jira Seraph تجاوز المصادقة وتنفيذ الأكواد عن بُعد（CVE-2022-0540） English • 中文 تفاصيل الاستغلال كما هو موضح في مدونة المؤلف، قدمت Atlassian قائمة طويلة من الإضافات المتأثرة الغالبية العظمى منها كانت نتائج إيجابية كاذبة، وأدرج المؤلف العديد من الإضافات المتأثرة الفعلية وفقًا للشروط الموضح...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler Über Apache DolphinScheduler ist eine moderne Datenorchestrierungsplattform, die agile, Low-Code-Entwicklung von leistungsstarken Workflows ermöglicht. Sie ist darauf spezialisiert, komplexe Aufgabenabhängigkeiten in Datenpipelines zu verwalten, und bietet eine breite...

WPTaskScheduler_CVE-2024-49039

Persistenza di WPTaskScheduler e CVE-2024-49039, come una delle superfici di attacco all'interno di Task Scheduler. WPTaskScheduler.dll è un componente di Task Scheduler, a partire da Windows 10 1507. Probabilmente si tratta di uno strumento backdoor utilizzato per la persistenza, analizzato da...

SharpMove

SharpMove - Esecuzione autenticata .NET per host remoti Compilazione Per compilare, apri il progetto in Visual Studio e compila per il rilascio. Opzioni WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath root@kitploit:...

exploits

exploits Le PoC pubblicate sono disponibili su exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

RedPersist

RedPersist RedPersist è uno strumento di persistenza per Windows scritto in C Compilazione del Progetto Di seguito sono elencate le librerie di terze parti utilizzate in questo progetto. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Carica il progetto di...

CVE-2025-56799

CVE-2025-56799 OS-Command-Injection-Schwachstelle über den Cache-Bereinigungsplaner in der Reolink-Desktop-Anwendung 1. Überblick Name : Reolink-Desktop-Anwendung Version : 8.18.12 Anbieter : Reolink CWE : CWE-78: Unzureichende Neutralisierung spezieller Elemente, die in einem OS-Befehl verwendet...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Autore Mohammed Idrees Banyamer Ricercatore di Sicurezza 📌 Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2026-25939 , una vulnerabilità critica di bypass dell'autorizzazione in FUXA software SCADA/ICS open-source. La vulnerabilità consente ad attaccanti remoti no...

wptsextensions.dll

WptsExtensions.dll per sfruttare il DLL Hijacking del Task Scheduler "non verrà corretto " Carica le variabili d'ambiente di Visual Studio x64: root@kitploit: "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" Aggiorna la variabile TCHAR script con un...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: विंडोज टास्क शेड्यूलर विशेषाधिकार वृद्धि भेद्यता अवलोकन CVE-2024-49039 एक विंडोज टास्क शेड्यूलर विशेषाधिकार वृद्धि EoP भेद्यता है जो एक प्रमाणित हमलावर को AppContainer सैंडबॉक्स से बचने की अनुमति देती है, Low integrity AppContainer से Medium integrity तक ऊपर उठाती है। CVSS स्कोर 8...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler نبذة Apache DolphinScheduler هي منصة حديثة لتنسيق البيانات تتيح تطويرًا مرنًا ومنخفض الكود لسير عمل عالي الأداء. وهي مخصصة للتعامل مع التبعيات المعقدة بين المهام في خطوط معالجة البيانات، وتوفر مجموعة واسعة من أنواع المهام المدمجة جاهزة للاستخدام فورًا فيما يلي أبرز ميزات...

CVE-2021-21425

CVE-2021-21425 - GravCMS RCE non autenticata Exploit di esecuzione remota di codice non autenticata per GravCMS = 1.10.7 tramite scrittura arbitraria di YAML nello scheduler. Questa è una versione migliorata di EDB-49973. L'exploit originale richiede la modifica manuale dei valori hardcoded nello...

Quartz-1

Zum Kompilieren: % mvn install -DskipTests Hinweis: a. Das endgültige Quartz-JAR befindet sich unter quartz/target b. Falls Sie nicht über Oracle- und/oder Weblogic-Drittanbieter-Bibliotheken JARs verfügen, die für die Kompilierung erforderlich sind diese können aufgrund von Lizenzbestimmungen...

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Quadratischer Denial-of-Service in htmlsanitizeex 1.5.3. Die Bibliothek dient dazu, nicht vertrauenswürdiges HTML zu neutralisieren, doch zwei unabhängige superlineare Codepfade ermöglichen es einer einzigen präparierten Anfrage, einen BEAM-Scheduler für...

persistence-info.github.io

Il repository cerca di raccogliere informazioni sui meccanismi di persistenza di Windows per rendere più efficiente la protezione/rilevamento. La maggior parte delle informazioni è nota da anni e viene attivamente utilizzata in vari scenari. Aspettatevi altro. Faccio del mio meglio per aggiungere...

CVE-2026-72696

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: use-after-free dello scheduler condiviso di AppleM2ScalerCSCDriver Divulgazione tecnica pubblica per CVE-2026-43655 , un use-after-free di AppleM2ScalerCSCDriver / IOSurfaceAccelerator raggiungibile dal sandbox predefinito delle app iOS senza autorizzazioni speciali. Apple ha...