CVE-2024-24386

VitalPBX - CVE-2024-24386 취약점 제목: 명령 삽입 작성자: Erick Duarte 버전: 3.2.5-2 이 취약점은 Task Manager 모듈을 Cron Profile과 함께 사용할 때 발생합니다. 이 취약점을 악용하려면 OS 내 특정 폴더에 스크립트를 배치해야 합니다. 해당 폴더는 "/var/lib/vitalpbx/scripts"입니다. 그래서 호기심에 Burp를 사용하여 서버로 전송되는 내용을 분석하기 시작했습니다. 이를 위해 1분마다 실행되는 Cron Profile을 생성했습니다. 다음으로 Task...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

sh00t

A Testing Environment for Manual Security Testers Sh00t 보안 테스트 수행에 집중할 수 있도록 도와주는 작업 관리자입니다. 할 일 체크리스트테스트 케이스를 제공합니다. 사용자 정의 가능한 버그 템플릿으로 버그 리포트 작성을 도와줍니다. 기능: 보안에 특화되지 않은 일반 편집기나 작업 관리 도구를 대체하는 동적 작업 관리자 Evernote, OneNote 등 보안에 최적화되지 않은 도구를 대체하는 자동화된 사용자 정의 보안 테스트 케이스 체크리스트 다양한 목적에 맞는 맞춤형 버그 템플릿...

ring3-kit

ring3-kit NT 후킹NtQuerySystemInformation을 사용하여 프로세스를 작업 관리자에서 숨깁니다. 간단한 Ring-3 사용자 모드 루트킷입니다. 방법 프로세스를 작업 관리자에서 숨기는 자체 함수로 API 함수 NtQuerySystemInformation를 후킹합니다. 후킹된 함수가 대신 호출됩니다. DLL이 Taskmgr.exe에 주입되어 후킹 코드를 실행할 가상 메모리 공간을 확보합니다. 면책 조항 개발자 Josh Schiavone은 이 간단한 루트킷의 오용에 대해 책임을 지지 않습니다. 승인된 액세스...

TaskManager-Button-Disabler

TaskManager-Button-Disabler 작업 관리자에서 버튼을 비활성화/이름 변경하는 간단한 방법입니다. 설치 git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build 기능 프로세스 종료 버튼 이름 변경 프로세스 종료 버튼 비활성화 TaskMgr, ProcessHacker 등에서 작동합니다. 실행 화면...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 개념 증명PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md 개념 증명PoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 개념 증명PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md 개념 증명PoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption through specific user interactions...

CVE-2026-6079

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

June 23, 2026—KB5095091 (OS Build 28000.2340) Preview

None None...

EUVD-2026-19115

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585

Summary of CVE-2026-5585 : Tencent AI-Infra-Guard 4.0 contains a vulnerability in the Task Detail Endpoint, specifically an unknown function within the file common/websocket/task_manager.go. Manipulation of this element results in information disclosure. The attack may be initiated remotely and, ...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

CVE-2026-5585 Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/taskmanager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit ha...

AI-Infra-Guard 访问控制错误漏洞

AI-Infra-Guard is an open-source AI security risk detection and red-team testing platform developed by Tencent. Version 4.0 of AI-Infra-Guard contains a access control vulnerability, which stems from incorrect handling of the file common/websocket/taskmanager.go, potentially leading to informatio...

CVE-2026-2351

The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callbackgettextfromurl function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on th...

CVE-2026-4004

The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2. This is due to missing capability checks in the callbacksearch function and insufficient input validation that allows shortcode syntax...