304 matches found
BypassUAC
README 本程序基于白名单bypassuac，使用cs的免杀马即可直接上线并获得uac权限 使用格式：bypassuac.exe 演示效果如下 whoami /priv如下 hashdump抓取密码如下 免杀效果 windows defender测试通过 360安全卫士测试通过...
whitelist-bypass
Omisión de Lista Blanca Tuneliza el tráfico de internet a través de plataformas de videollamadas VK Call, Yandex Telemost, WB Stream para eludir la censura de listas blancas gubernamentales. Configuración Guía de configuración paso a paso en ruso: docs/SETUP.md Cómo funciona Hay dos modos de túne...
CVE-2015-3224
Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...
CVE-2025-46080
Autor del bug: yggcwhat Versión afectada: Huocms Proveedor: https://huocms.com/ Dirección del código fuente: https://gitee.com/digital-flag/huocms Archivo vulnerable: AttachmentController.php Versión afectada： HuoCMS - controller -backend - AttachmentController.php:editFileUrl El sufijo de...
CVE-2022-46169
CVE-2022-46169 Cacti Ejecución Remota de Código Ciega Pre-Autenticación Descargo de responsabilidad Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. Explicación Este script realiza fuerza bruta en las variables necesarias para explotar esta...
CVE-2025-66249-POC
CVE-2025-66249 — Omisión de la lista blanca de Path Traversal en Apache Livy Solo con fines educativos y de investigación en seguridad. No lo utilice contra sistemas que no sean de su propiedad o para los que no tenga permiso explícito por escrito. →Descargo de responsabilidad completo Resumen...
CVE-2026-0740
CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenticated Arbitrary File Upload. Description : The Ninja Forms - File Uploads plugin for WordPress is vulnerable to unauthenticated arbitrary file upload due to missing file type validation and missing capability checks in the...
CVE-2015-3224
Exploit CVE-2015-3224 - RCE en Rails Web Console Una implementación en JavaScript Node.js del exploit para CVE-2015-3224. Esta herramienta apunta a aplicaciones Ruby on Rails que ejecuten versiones vulnerables de la gema web-console, permitiendo Ejecución Remota de Código RCE no autenticada. Acer...
automation-controller: automation-controller-container: automation-controller: Notification template Jinja whitelist bypass via conditional gating leaks tracebacks
Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts job'job'+'env' and % if job.id 100 % conditional gating bypass both the AST check and the test-render stub has small job.id. At runtime, the gated branch executes and exceptions write full tracebacks...
automation-controller: automation-controller-container: automation-controller: Notification template Jinja whitelist bypass via conditional gating leaks tracebacks
Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts job'job'+'env' and % if job.id 100 % conditional gating bypass both the AST check and the test-render stub has small job.id. At runtime, the gated branch executes and exceptions write full tracebacks...
CVE-2026-71463 Automation-controller: automation-controller-container: automation-controller: notification template jinja whitelist bypass via conditional gating leaks tracebacks
Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts job'job'+'env' and % if job.id 100 % conditional gating bypass both the AST check and the test-render stub has small job.id. At runtime, the gated branch executes and exceptions write full tracebacks...
CVE-2026-92992
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
CVE-2026-92992
Dromara mayfly-go (up to 1.11.5 ) contains an authorization flaw in the AI Assistant component (file server/internal/ai/api/ai.go). The whitelist bypass is one-token wide: any compound command containing curl , wget , or sed executes automatically without approval, and that approval is granted by...
CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
EUVD-2026-82387
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
CVE-2026-92992: Missing Authorization
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...
CVE-2026-91997
evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...
CVE-2026-91997
evolution-api through version 2.3.7 contains a Prometheus metrics IP allowlist bypass . The root cause is an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, effectively disabling the IP whitelist. This allows unauthenticated remote attackers to acce...