Orchestrated-Powershell-for-CVE-2023-24932-en

Script d'orchestration d'atténuation du démarrage sécurisé Aperçu Ce script PowerShell automatise les étapes d'atténuation du démarrage sécurisé pour CVE-2023-24932 , comme indiqué dans le Guide de sécurité Microsoft. Il gère l'ensemble du processus, y compris les mises à jour du registre, les...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN — повышение привилегий Повышение привилегий Ivanti Secure Access ранее Pulse Secure — Cobalt Strike BOF CVE-2023-35080. Эксплойт от Alex и BOF от Tijme. Создано при поддержке Northwave Cyber Security Описание Это файл Beacon Object File BOF для Cobalt Strike CS и...

CVE-2025-0690

CVE-2025-0690 : Vulnérabilité de Débordement d'Entiers dans GRUB2 🛡️ Description Générale CVE-2025-0690 est une vulnérabilité critique de débordement d'entiers dans le chargeur d'amorçage GRUB2 , permettant l'exécution de code arbitraire et le contournement de Secure Boot. Cette faille affecte les...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Обзор Возможности Типы проверок WEB ACCESS SYSTEM INFO BYPASS DETECTED Пояснение типов статусов Начало работы Требования Использование Аргументы Указание целей Пользовательские переменные Оформление вывода Пла...

pulse-meter

Pulse Meter 이것은 Ivanti Connect Secure 어플라이언스의 시스템 스냅샷을 파싱하여 CVE-2023-46805, CVE-2024-21887 및 CVE-2025-0282와 관련된 잠재적 IOC를 식별하기 위한 진행 중인 작업입니다. 주의 : 가양성이 발생할 수 있으므로 결과를 수동으로 확인하는 것이 가장 좋습니다. 스냅샷 복호화에 관한 참고 사항 스냅샷은 하드코딩된 키로 암호화되어 있습니다. 안타깝게도 여기서 키를 공개할 수 없으므로 직접 찾아야 합니다. 키를 24바이트 16진수 문자열로 포맷한 후 --k...

tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-

Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ et https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...

ivanti_shell

Эксплуатация CVE-2024-21887 с помощью Ngrok обратного шелла Этот репозиторий содержит Python-скрипт, предназначенный для демонстрации эксплуатации уязвимости CVE-2024-21887 в шлюзах Ivanti Connect Secure. Он использует Ngrok для установления обратного шелла в образовательных и этических целях...

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN Dans Pulse Secure Pulse Connect Secure PCS 8.2 avant 8.2R12.1, 8.3 avant 8.3R7.1, et 9.0 avant 9.0R3.4, un attaquant distant non authentifié peut envoyer une URI spécialement conçue pour exécuter une vulnérabilité de lecture arbitraire de fichiers. exploit.sh = Exploration...

Orchestrated-Powershell-for-CVE-2023-24932

Orchestrateur de Secure Boot CVE-2023-24932 Automatise l'atténuation complète de Secure Boot pour CVE-2023-24932 BlackLotus. Gère automatiquement toutes les modifications de registre, redémarrages et vérifications. Prérequis Windows 10/11 ou Server 2016+ Privilèges administrateur Secure Boot acti...

Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-efi-aa64 / grub2-efi-aa64-cdboot / etc Multiple Vulnerabilities (crlsa-2023_0752)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230752 advisory. grub2: Buffer overflow in grubfontconstructglyph can lead to out-of-bound write and possible secure boot bypass CVE-2022-2601 grub2: Heap based out-of-boun...

Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_2127)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232127 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 8 [TuxCare] Security Update: grub2-efi-ia32-cdboot / grub2-efi-ia32-modules / grub2-efi-x64 / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1744213211)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1744213211 advisory. - A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php-pecl-apcu / php-pecl-apcu-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_10949)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202410949 advisory. php: host/secure cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 php: passwordverify can erroneously return true, opening ATO risk...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_0838)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230838 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...

CVE-2026-102109

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitatio...

CVE-2026-102091

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrary outbound network requests and read back the responses. This could potentially be used to reach internal-only servic...

CVE-2026-102109

A SQL injection vulnerability exists in Kiteworks Secure Data Forms . The root cause is the improper sanitization of a value derived from an authenticated user's stored account data when incorporated into a database query. Exploitation requires an authenticated session and is only applicable to d...

CVE-2026-102109 Kiteworks Secure Data Forms SQL injection

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitatio...

CVE-2026-102109 Kiteworks Secure Data Forms SQL injection

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitatio...

CVE-2026-102121 Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more data than the form itself required. Anyone who knew the web address of a published form could potentially retrieve th...