CVE-2026-106173 PoC exploit for a path traversal file write leading to RCE in Fortinet FortiSIEM. The FortiSIEM gRPC QueryResultReqhandler processes untrusted metadata without proper path validation. By crafting metadata containing both path traversal sequence…
互动与广告
近 30 天帖子聚合
- 平均反应
- 23.3
- 平均评论
- 0
- 平均转发
- 144.3
- 广告帖子(30 天)
- 3
- 广告占比
- 25.0%
- 被提及(30 天)
- 0
榜单位置
各窗口最近一次榜单
暂未进入榜单
频道进入榜单池并满足数据条件后会显示名次。
最近帖子
按发布时间倒序,最多展示 8 条
В сентябре Майкрософт по-тихому прикрыли недоработку в протоколе SMB, что позволяло релеить SMB в SMB (reflection тоже) даже при активном signing. Подробно в блоге: https://blackfield.ch/blog/defeating-enforced-smb-signing/ И вот уже в октябре Майкрософт патчи…
(无文本内容)
php2shell-bypass-aslr-exp A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory. php2shell-CVE-2026-109618-CVE-2026-109619-PoC PoC exploit for php2shell, demonstrating remote code execut…
Placing bets — will a PHP universal exploit drop on Friday?😂
AhsayCBS-Auth-Bypass-RCE AhsayCBS versions 10.3.4 and earlier are vulnerable to unauthenticated remote code execution via two chained authentication bypass and path traversal flaws in the JSON API and replication receiver modules (CVE-2026-105133 and CVE-2026-…
LogonStealer Abuses the Credential Provider COM interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks A Windows credential stealer implemented as a rogue Credential Provider DLL. It loads automatically into logonui.exe via COM…
SrHollow LSA secrets extraction, reuse a preexisting VSS shadow copy + inline regf parser + AES-256 LSA decrypt via bcrypt.dll.
相似频道
基于 Telegram 官方相似频道推荐
暂无相似频道
等待相似频道抓取任务运行。