The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

CVE-2026-100664

A flaw was found in Netty's HTTP/3 codec. When converting HTTP/1 requests to HTTP/3, the codec improperly prioritizes the Host header over the request-target authority. A remote, unauthenticated attacker can exploit this authority confusion by sending a request containing conflicting destination...

Invisi-Shell

Invisi-Shell Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version...

Starlette - Improper Validation of Unsafe Equivalence in Input

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

Adobe Experience Manager ≤ 6.5.23.0 - XML Injection

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...

LOLBins

LOLBins PyQT app to list all Living Off The Land Binaries and Scripts for Windows from LOLBAS and Unix binaries that can be used to bypass local security restrictions in misconfigured systems from GTFOBins. Widnows Linux...

TeleShadow3

TeleShadow3 Teleshadow3- Advanced Telegram Desktop Session Hijacker! Download Click HERE to download the latest version! Screenshot Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 ローカルルートの脆弱性- CVE-2019-13272 / セキュリティバイパスの脆弱性 – CVE-2019-14287...

CVE-2023-2640-32629

Ubuntu 権限昇格: CVE-2023-2640 および CVE-2023-32629...

CVE-2025-31651-o

CVE-2025-31651 ごく一部の可能性の低い書き換えルール構成において、特別に細工されたリクエストが一部の書き換えルールをバイパスすることが可能でした。これらの書き換えルールがセキュリティ制約を効果的に強制していた場合、その制約がバイパスされる可能性がありました。 0x01 ステータス 公開 0x02 概念実証 Finder 詳細は CVE-2025-31651.md を参照...

CVE-2020-15916

JA GenLANConfigAttack は、デバイスのLAN設定への不正な変更を可能にする脆弱性 CVE-2020-15916 を悪用するためのPoCです。 機能 LAN設定の脆弱性を悪用します ネットワーク設定を変更する悪意のあるペイロードを送信します LANを制御するためにセキュリティメカニズムをバイパスします 使用方法 1. このリポジトリをクローンします: root@kitploit: git clone https://github.com/geniuszly/CVE-2020-15916 2. 依存関係をインストールします: root@kitploit: pip...

CVE-2023-33668

CVE-2023-33668 要約 DigiExamは、監視 試験監督およびプロクタリングソフトウェアです。このソフトウェアは学校（または学生）のコンピューターにインストールされます。学生が試験に参加すると、DigiExamは次のことを行います：仮想マシン上で動作していないことを確認し、すべてのアプリケーションを終了させ、自身を全画面表示し、ユーザーがDigiExamウィンドウ以外に移動できないようにします。 セキュリティ検出は脆弱であり、ファイルシステム内のファイル（ユーザー所有）を単に置き換えることで簡単に回避できることが判明しています。これはDigiExam...

vulnerability-exploitation

脆弱性悪用 ローカルルートの脆弱性 - CVE-2019-13272 / セキュリティバイパスの脆弱性 – CVE-2019-14287/Google Android - 'Stagefright' リモートコード実行 - CVE-2015-1538...

CVE-2018-1305

Apache Tomcat セキュリティ回避の脆弱性 最近、ApacheはApache Tomcat 7、8、9の複数のバージョンにセキュリティ回避の脆弱性が存在するというセキュリティアドバイザリを公開しました。攻撃者はこの問題を利用して、特定のセキュリティ制限を回避し、不正な操作を実行する可能性があり、これがさらなる攻撃に寄与する可能性があります。 Apache...

kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Solidity アセンブリの戻りデータサイズ混同 プログラムコード Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc"; requiresuccess, "call failed"; //...