CVE-2026-80844

CVE-2026-80844 寄付 このプロジェクトの維持にご協力ください このプロジェクトが役に立つと思われた方は、PayPal または ABA Mobile を通じて、継続的な維持管理をご支援いただけますと幸いです。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ ご寄付の10%は、Kantha Bopha Children's Hospital に寄付されます。 | お支払い方法を選択してください ABA Mobile でスキャン · クリックで拡大 ---|--- ⚡...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — PowerShellコードの難読化と仮想化 PowerShell Pro Obfuscator は、プロプライエタリな .ps1 スクリプトを、リネーム、ポリモーフィックな文字列・整数暗号化、制御フロー平坦化、有限状態オートマトン（FSA）、VMエンジン、自己防御型の整合性チェック、保護リンカー、アンチデバッグプローブで保護します。 ポリモーフィックな文字列暗号化、VMエンジン、有限状態オートマトン変換、自己整合性・アンチデバッグチェックにより、PowerShell .ps1 スクリプトを難読化・仮想化・保護します —...

CnaEmulator

CnaEmulator - Cobalt Strike Aggressor Script エミュレータ & モックハーネス CnaEmulator は、Cobalt Strike Aggressor Scripts .cna 向けのスタンドアロンで汎用的な開発・エミュレーション・テストハーネスです。セキュリティ研究者、ツール開発者、BOF 作者が、teamserver や GUI クライアントを起動することなく、スクリプト構文の検証、Beacon コンソールエイリアスコマンドのシミュレーション、および COFFLoader64.exe を介したインメモリ Beacon Object...

CVE-2024-7456scripts

CVE-2024-7456를 기반으로 bash와 Node.js를 사용하여 SQLi를 익스플로잇하는 데 도움이 되는 간단한 스크립트들 https://nvd.nist.gov/vuln/detail/CVE-2024-7456...

Follina-Workaround-CVE-2022-30190

Follina 대책 CVE-2022-30190 설명 이 두 스크립트는 Microsoft가 제공한 대책을 적용하여 CVE-2022-30190 취약점을 완화하고, 공식 패치가 출시될 경우 대책을 복원하는 데 사용할 수 있습니다. 자세한 내용은 MSRC 블로그에서 확인할 수 있습니다. 첫 번째 스크립트 'FollinaMitigation.ps1'은 레지스트리 키를 백업한 다음 제거하여 대책을 적용합니다. 두 번째 스크립트 'FollinaImportKey.ps1'은 이전에 내보낸 레지스트리 키를 가져옵니다. 추가 세부 정보는 여기에서...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft 署名済み PowerShell スクリプト C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection にある署名済みスクリプトの一覧 ファイルへのアクセス デフォルトではファイルにアクセスできません。TrustedInstaller 特権が必要です。 https://github.com/Mr-Un1k0d3r/EDRs/blob/main/elevatetosystemortrustedinstaller.c...

Fermion

Fermion Fermion は、frida-node と monaco-editor をラップする electron アプリケーションです。単一の UI を通じて Frida スクリプトのプロトタイピング、テスト、調整を行うための完全に統合された環境を提供します。Monaco の統合により、Visual Studio Code に期待されるすべての機能（Linting、IntelliSense、キーバインディングなど）が利用できます。さらに、Fermion は Frida API 用の TypeScript 言語定義を備えているため、Frida スクリプトを簡単に作成できます。...

MoreImpacketExamples

MoreImpacketExamples このリポジトリには、Impacket ライブラリを使用して作成された短い Python スクリプトがいくつか含まれています。このプロジェクトの主な目的は、提供されている impacket のサンプルから、独自のスクリプトの修正・作成への移行を検討している自分自身や他の人々を支援することです。これらのスクリプトは、実用性や OPSEC の観点で必ずしも最適化されているわけではありません。ただし、デフォルトの動作を変更したい場合に備えて、可能な限り動的にできるよう努めました。 wmiregexec.py wmiregexec.py...

CVE-2026-103888

The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 4.4.0 . The root cause is insufficient input sanitization and output escaping of the 'woosq-redirect' parameter. Unauthenticated attackers can in...

CVE-2023-46870

CVE-2023-46870 Nordic Semiconductor nRF Sniffer for Bluetooth LE 버전 3.0.0, 3.1.0, 4.0.0, 4.1.0 및 4.1.1에는 잘못된 파일 권한이 설정되어 있어, 공격자가 bash 및 python 스크립트를 수정하여 권한 상승 및 코드 실행을 수행할 수 있습니다. Keywords: Local Privilege Escalation LPE, Code Execution Affected Platform: Linux, MacOS Affected Files:...

EUVD-2026-91895

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-92538

The LearnPress – WordPress LMS Plugin for WordPress (versions up to and including 4.4.7 ) is vulnerable to Reflected DOM-Based Cross-Site Scripting . The flaw exists in the 'orderby' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbit...

CVE-2026-105090

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

CVE-2026-105090

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

CVE-2026-105090

Formbricks versions before 5.4.4 and 6 before 6.0.1 are vulnerable to stored XSS due to an insufficient permission check in the Custom Head Scripts feature. A workspace member with only readWrite permissions can bypass the intended Manage role restriction to configure scripts. These scripts execu...

CVE-2026-105090

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

EUVD-2026-91874

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

CVE-2026-105090

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

PT-2026-104502

Name of the Vulnerable Software and Affected Versions WPC Smart Quick View for WooCommerce versions prior to 4.4.1 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs via the woosq-redirect paramete...

PT-2026-104479

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...