CVE-2026-104082

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

CVE-2026-104082

SmarterMail before Build 9777 is vulnerable to Remote Code Execution (RCE) due to a bypass of the Volume Mount script-directory containment control . An attacker with a SysAdmin-scoped access token can provision a new mail domain via the domain-put endpoint, setting an arbitrary FileStore root pa...

EUVD-2026-95887

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

betwixt

Betwixt는 친숙한 Chrome DevTools 인터페이스를 사용하여 브라우저 외부의 웹 트래픽을 분석하는 데 도움을 줍니다. 설치하기 사용 중인 운영 체제에 맞는 최신 릴리스를 다운로드하거나, 직접 번들을 빌드하거나, 소스 코드에서 Betwixt를 실행하세요. 설정하기 트래픽을 캡처하려면 Betwixt가 백그라운드에서 생성한 프록시http://localhost:8008로 트래픽을 보내야 합니다. 시스템 전체 트래픽을 분석하려면: macOS - 시스템 환경설정 → 네트워크 → 고급 → 프록시 → 웹 프록시HTTP Windo...

SirepRAT

SirepRAT - Windows IoT Core에서 SYSTEM 권한으로 RCE SirepRAT 는 대상에 실제 RAT 악성코드를 작성할 필요 없이 완전한 RAT 기능을 제공합니다. 배경 이 방법은 Microsoft 사이트에서 제공하는 공식 이미지에 내장되어 실행 중인 Sirep Test Service를 악용하는 것입니다. 이 서비스는 IoT 장치에서 드라이버/하드웨어 테스트를 수행하기 위해 구축할 수 있는 HLK 설정의 클라이언트 부분입니다. Sirep/WPCon/TShell 프로토콜을 제공합니다. 우리는 Sirep/WPC...

CVE-2026-23520

CVE-2026-23520 MCP API リモートコマンド実行（RCE）PoC 📌 概要 このリポジトリには、脆弱なMCP APIエンドポイント（一般的には /api/mcp/connect）を公開するアプリケーションに影響を与えるリモートコマンド実行（RCE）脆弱性のProof-of-Concept（PoC）エクスプロイトが含まれています。 この脆弱性により、細工されたAPIリクエストを介してシステムレベルのコマンドを実行できます。 🚀 クイックスタート 1. リスナーを起動する nc -lvnp ATTACKERPORT 2. エクスプロイトを実行する python3...

CVE-2026-76273

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

EUVD-2026-94625

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

CVE-2026-76273 Improper Input Validation through the collect Command in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 보안 연구 고지 이 프로젝트는 보안 연구 및 교육 목적으로만 사용됩니다. 이 도구를 사용하여 승인되지 않은 테스트를 수행하는 것은 불법입니다. 저자는 어떠한 오용이나 손해에 대해서도 책임을 지지 않습니다. 📋 개요 CVE-2024-31317은 Android 9부터 Android 13까지의 기기에 영향을 미치는 심각한 보안 취약점으로, WRITESECURESETTINGS 권한을 가진 애플리케이션이 명령어 주입을 통해 시스템 수준 권한 실행을 얻을 수 있습니다. 이 프로젝트는 해당...

PT-2026-107695

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description An issue exists where a user with the run collect capabili...

Enumprotections_BOF

Enumprotections BOF このBOFは、システムプロセスを列挙し、それぞれの保護レベルを特定するために使用できます。サービス関連、ユーザー、セッション、パスなどの追加情報も返されます。これらの情報を組み合わせることで、SYSTEMレベルのDLLハイジャックを調査するための有力な候補を特定できます。理想的なプロセスは次のとおりです。 1. 保護されていない 2. サービスに関連付けられているため、開始/停止が可能 3. サードパーティ製ソフトウェア。MicrosoftはMicrosoftコンポーネントのハイジャック検出に長けています。 使用方法 コンパイル...

Eufy Omni C20, Omni X10 Pro

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

CVE-2026-92253 Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

PT-2026-95970

Name of the Vulnerable Software and Affected Versions WatchDog Anti-Virus version 1.8.640 Description Improper link resolution during the quarantine restoration process on Windows allows a local, low-privileged attacker to write a quarantined file to an arbitrary filesystem location. This is...

PT-2026-93956

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description Insufficient validation of user-supplied input allows an authenticated remote attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying...

CVE-2026-78604: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

PT-2026-84741

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software allows a hacker to increase their privileges.

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...