58 matches found
CVE-2025-54100
CVE-2025-54100 La commande curl de PowerShell utilise Invoke-WebRequest en arrière-plan. root@kitploit: PS C:\Users\melih curl cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:...
CVE-2025-54100
CVE-2025-54100 – PowerShell 응답 파싱 PoC 악의적인 HTML 파싱을 통해 CVE-2025-54100 이 Windows PowerShell 5.1에서 원격 코드 실행RCE으로 이어질 수 있음을 보여주는 간결한 개념 증명PoC입니다. 목차 CVE-2025-54100이란? PoC 작동 방식 빠른 시작 피해자 호스트에서 트리거 문제 해결 및 검증 증거 완화 면책 조항 참고 자료 CVE-2025-54100이란? 유형: -UseBasicParsing을 사용하지 않을 때 Invoke-WebRequest에서 발생하는...
CVE-2025-54100
CVE-2025-54100 – PoC анализа ответа PowerShell Демонстрация того, как CVE-2025-54100 через обработку вредоносного HTML приводит к удаленному выполнению кода RCE в Windows PowerShell 5.1. Что такое CVE-2025-54100? Тип уязвимости: Риск внедрения команд при отсутствии параметра -UseBasicParsing в...
Electron 注入漏洞
Electron is an open-source JavaScript framework developed by users for creating cross-platform desktop applications. This framework is based on Node.js and Chromium, allowing the development of cross-platform desktop applications using HTML and CSS. Versions of Electron prior to 38.8.6, 39.8.3,...
CVE-2026-34767 Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.3, 40.8.3, and 41.0.3, apps that register custom protocol handlers via protocol.handle / protocol.registerSchemesAsPrivileged or modify response headers via...
Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
Impact Apps that register custom protocol handlers via protocol.handle / protocol.registerSchemesAsPrivileged or modify response headers via webRequest.onHeadersReceived may be vulnerable to HTTP response header injection if attacker-controlled input is reflected into a response header name or...
GHSA-4P4R-M79C-WQ3V Electron: HTTP Response Header Injection in custom protocol handlers and webRequest
Impact Apps that register custom protocol handlers via protocol.handle / protocol.registerSchemesAsPrivileged or modify response headers via webRequest.onHeadersReceived may be vulnerable to HTTP response header injection if attacker-controlled input is reflected into a response header name or...
Exploit for Command Injection in Microsoft
CVE-2025-54100 – PowerShell Response Parsing PoC Demonstrates...
Exploit for Command Injection in Microsoft
CVE-2025-54100 - PowerShell Response Parsing PoC This reposit...
Exploit for CVE-2025-54100
CVE-2026-0386 Powershell's curl uses Invoke-WebRequest u...
December 9, 2025—KB5071507 (Security-only update)
None None...
December 9, 2025—KB5071547 (OS Build 20348.4529)
None None...
KB5074204: Security Update for Windows PowerShell (OS Builds 26100.7392 and 26200.7392)
None None...
KB5074353: Security Update for Windows PowerShell (OS Build 20348.4467)
None None...
EUVD-2012-2833
Malware in sbrugna...
EUVD-2015-1438
Malware in sbrugna...
EUVD-2018-4369
Malware in sbrugna...
Microweber Security Breach
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber version v.2.0.1. A remote attacker can...
SUSE CVE-2015-1297
The WebRequest API implementation in extensions/browser/api/webrequest/webrequestapi.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted 1 app or 2...
SUSE CVE-2018-5152
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firef...