CVE-2022-35497

在 Trimble 的 TM4WEB =22.2.0 中，由于会话标识符的安全配置错误，攻击者可能通过影响外部文档查看器端点的反射型跨站脚本恢复有效的会话 Cookie。 具体而言，用于维持会话的三个 Cookie 分别是 UID、rstring 和 PHPSESSIONID，它们均未设置适当的 HttpOnly 标志，因而无法防止通过 JavaScript 执行向量恢复 Cookie。 步骤 1 : 攻击者利用反射型跨站脚本漏洞 CVE-2022-35499 获取已认证受害者的会话 Cookie。 攻击者会在面向互联网且可接收 HTTP...

CVE-2024-42009-PoC

CVE-2024-42009 PoC: Captura de Correo Electrónico y Exploit XSS en Roundcube Webmail Resumen Este repositorio contiene una prueba de concepto PoC para CVE-2024-42009 , una vulnerabilidad de Cross-Site Scripting XSS almacenado en Roundcube Webmail versión 1.6.7 y otras versiones. El exploit...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook 实验室漏洞 漏洞描述 CVE-2024-21413 是 Microsoft Outlook 中发现的一个严重漏洞，允许远程攻击者通过精心构造的电子邮件执行恶意链接。该漏洞利用 file:// 协议将受害者重定向到攻击者控制的 SMB 共享，可能导致 NTLM 凭据泄露或本地文件的未授权访问。 Windows 10 服务启动脚本 + 凭据 Windows 10 实验室中用户 victim 的密码是 victim，服务器 hMailServer 的密码是 victim 邮箱 [email protected] 的密码是...

CVE-2026-90943

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2026-90943

parallax/filament-comments (through 3.0.0 ) contains a stored cross-site scripting vulnerability in comment body rendering. The root cause is unescaped output in the comment display views (comments.blade.php) and policy layer, allowing authenticated panel users to inject malicious scripts into co...

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

EUVD-2026-77580

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2026-90943 parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

CVE-2021-21975

受影响产品 VMware vRealize Operations 8.3.0、8.2.0、8.1.1、8.1.0、7.5.0 VMware Cloud Foundation 4.x、3.x vRealize Suite Lifecycle Manager 8.x 描述 2021年3月31日，VMware官方发布了关于vmsa-2021-0004的风险通知。漏洞编号为cve-2021-21975和cve-2021-21983。漏洞等级为高风险，漏洞评分为8.6。 CVE-2021-21975：拥有vRealize Operations Manager...

EUVD-2026-77514

Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's HTTP components served to an authenticated user. The Logviewer reflected the request's Origin header back in Access-Control-Allow-Origin while also sending...

CVE-2023-23397_EXPLOIT

CVE-2023-23397 MS Outlook 脆弱性の悪用 CVE-2023-23397 は Microsoft Outlook の脆弱性であり、攻撃者がユーザーの認証情報を流出させる可能性があります。この脆弱性は、攻撃者がメールや会議の招待状内の「ReminderSoundFile」プロパティに Universal Naming Convention UNC パスを指定できることに起因します。Outlook でリマインダーがトリガーされると、ユーザーのクライアントは指定されたパスのサウンド ファイルを読み込もうとします。Outlook がリモート SMB サーバーへの SMB...

DarkTortilla-RAT-Telegram-Exfiltration-Payload-Extraction-Analysis

1. 信用卡盗窃 – 卡片数据提取 Process Hacker 内存分析显示，DarkTortilla RAT 以信用卡信息为目标，包括卡号、有效期和卡类型。 观察到的关键字符串： cardnumberencrypted – 加密的卡号。 expirationmonth – 有效期月份。 expirationyear – 有效期年份。 Mastercard – 针对万事达卡。 Visa – 针对维萨卡。 Discover Card – 针对发现卡。 Union Pay Card – 针对银联卡。 American Express – 针对美国运通卡。 为何重要： 金融数据盗窃：...

Astra Linux – Vulnerability in Firefox

The “Copy Image Link” context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows—in conjunction with a Content Security Policy that stopped a redirection chain in the middle—the final image URL could contain an authentication toke...

Astra Linux – Vulnerability in Thunderbird

Thunderbird ignored the configuration that required STARTTLS security for SMTP connections. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication...

Astra Linux – Vulnerability in Zabbix

A authenticated user can create a hosts group using the configuration with XSS payload, which will be available to other users. When XSS is stored by an authenticated malicious actor, and other users attempt to search for groups during the creation of new hosts, the XSS payload will activate,...

shai-hulud-scan

shai-hulud-scan Claude Codeのスキルで、Mini Shai-Hulud サプライチェーン・ワーム（CVE-2026-45321、CVSS 9.6）からの侵害指標（IOC）をスキャンします。 Mini Shai-Huludとは？...

scan-shai-hulud

scan-shai-hulud 一个快速、零依赖的 Bash 扫描器，用于检测您的机器是否受到 CVE-2026-45321 "Mini Shai-Hulud" 供应链攻击的影响。 2026年5月11日，来自 TanStack、Mistral AI、UiPath、OpenSearch 和 Guardrails AI 的 超过 170 个 npm 包 和 2 个 PyPI 包 同时被投毒。恶意负载会窃取 AWS 凭证、GitHub 令牌、npm 令牌、Vault 密钥和 SSH 密钥——并且包含一个可通过 CI/CD 管道自我传播的蠕虫。 快速开始 root@kitploit: curl...

pmp-exploit

pmp-exploit 该漏洞利用工具利用了 Password Manager Pro 中存在的权限提升漏洞，可将普通用户提升为 SuperAdmin，然后下载存储在应用程序中的密码和文件。 受影响系统 root@kitploit: 产品 : ManageEngine Password Manager Pro 公司 : ZOHO Corp. 内部版本号 : 8.1 及可能更早的版本 受影响版本 : 8102 及可能更早的版本 用法 要正确执行，需要使用以下语法。 root@kitploit: pmp-getthemall.py -u -p...

poisontap

PoisonTap - extrae cookies, expone el router interno e instala una puerta trasera web en ordenadores bloqueados Creado por @SamyKamkar || https://samy.pl Cuando PoisonTap una Raspberry Pi Zero y Node.js se conecta a un ordenador bloqueado/protegido por contraseña , hace lo siguiente: emula un...

CVE-2026-82783

A plaintext password storage flaw affects the CONPROSYS nano Series , a product by Contec. If exploited, an attacker with physical access to the device can obtain stored credentials. The vulnerability requires high attack complexity and no prior privileges (CVSS 4.0: 4.1 MEDIUM ; CVSS 3.1: 4.2 ME...