CVE-2026-102829

The simple-git library, which allows Node.js applications to execute Git operations, is vulnerable due to a flaw in the argv-parser package prior to version 2.0.1 . The parseEnv function omits VISUAL from GitEnvKeys, causing prepareEnv to drop the value before vulnerabilityCheck can identify it a...

CVE-2026-95332

An use of uninitialized variable flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=546639650...

Invoke-DOSfuscation

Invoke-DOSfuscation v1.0 介绍 Invoke-DOSfuscation 是一个兼容 PowerShell v2.0+ 的 cmd.exe 命令混淆框架。（白皮书：https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html） 背景 过去几年作为事件响应顾问，我目睹了多个威胁行为者采用的众多混淆和逃避技术。其中一些技术极其复杂，而另一些则巧妙简单，但这两类技术都被用来逃避检测。根据我的经验，我发...

EUVD-2026-89138

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95332

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95332

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to a use of uninitialized variable flaw in the Tint component. A remote attacker could exploit this by navigating to a crafted HTML page to read memory outside the sandbox . This issue affects the Chromium browser and was addr...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ 此工具仅用于教育目的。严禁在受控环境之外未经授权使用。 CVE-2026-24061 是 GNU Inetutils（版本 1.9.3–2.7）中 telnetd 存在的一个严重漏洞（CVSS 9.8），允许远程攻击者通过 USER 环境变量传递 -f root，绕过身份验证并获得 root 访问权限。此工具旨在模拟对该漏洞的滥用。 系统要求 Windows 操作系统/Linux Python 3.4+ 使用方法 本 PoC 需要一个目标主机地址。提供方式有两种： 1. 编辑 payload.txt 文件 将你的 payload 插入...

rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

looney-tunables-CVE-2023-4911

PoC de CVE-2023-4911 Looney Tunables Este es un PoC de CVE-2023-4911 también conocido como "Looney Tunables" que explota un error en la función de análisis de la variable de entorno GLIBCTUNABLES del cargador dinámico de glibc, parsetunables. Comenzando Ejecutando el programa Podemos comprobar si...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 adalah kerentanan local privilege escalation pada sudo ketika menggunakan perintah sudoedit. Kerentanan ini diperkenalkan sejak sudo 1.9.0 karena cara sudoedit memvalidasi environment variable pengguna dan kepemilikan file yang kurang tepat. 📖 Deskripsi A flaw...

fix-CVE-2020-15228

Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS

CVE-2024-40842: macOS 上的 XProtectRemediatorDubRobber 信息泄露 概述 CVE-2024-40842 是 macOS XProtect Remediator 中的一个本地信息泄露漏洞，涉及模块： XProtectRemediatorDubRobber 该漏洞源于 Apple 的特权安全进程不安全地处理了环境变量 MAGIC。 机器上运行的恶意应用程序可以利用此行为，诱使 XProtect 读取该应用程序通常无权访问的数据。 Apple 描述了影响： 应用程序可能能够访问用户敏感数据。 Apple 已通过加强环境变量的检查和清理，在 mac...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE no autenticado inyección de variables de entorno en MCP stdio Ejecución remota de código no autenticada en Langflow OSS hasta 1.10.1. La lista negra de variables de entorno que protege la configuración del servidor MCP stdio DANGEROUSENVVARS omite...

CVE-2026-39949

CVE-2026-39949: Authenticated Remote Code Execution in Cacti Through Host Variable Injection Summary An OS command injection vulnerability in Cacti ≤ 1.2.30 allows any authenticated user with device and graph template creation privileges to execute arbitrary commands on the underlying server. The...

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath 缓冲区溢出 漏洞概述 在 rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail: '%s'\n", strerrorerrno; goto...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

credactor

Credactor 找到密钥。修复它。干净提交。 密钥扫描器擅长拉响警报，却不太能帮你把火扑灭。它们丢给你一份泄露凭据的清单，剩下的清理工作全归你。Credactor 补上了这个闭环：它找到硬编码的密钥并就地重写，让一次泄露从检测到修复只需一条命令。 让凭据远离源代码是一项基线安全实践，而非可选项。Credactor 让守住这条基线变得成本低廉——无论是在提交前的本机上，还是在合并前的 CI 中。你可以单独运行它，也可以与已经信任的扫描器搭配使用。 Credactor 找到这个： dbpassword = "h8Tq2vKp9mRz4Wd"...

CVE-2021-4034

Exploit para CVE-2021-4034 Pkexec - Escalada de Privilegios Local Solo con fines educativos y de investigación de seguridad autorizada. Autores del Exploit Original @arthepsy Descripción de la Vulnerabilidad Se encontró una vulnerabilidad de escalada de privilegios local en la utilidad pkexec de...

CVE-2022-0847

CVE-2022-0847 Dirty Pipe linux内核提权分析 toc 本文首发于华为安全公众号，这是博客版比较完整 首发链接:https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg 漏洞简介 漏洞编号: CVE-2022-0847 别名: 脏管道dirty pipe 漏洞产品: linux kernel - splice syscall 影响版本: linux 5.8 补丁 f6dd975583bd 引入 5.16.11、5.15.25、5.10.102 修复 漏洞危害: 对任意可读文件写不超过一页的内容足够了，可本地提权。 环境搭...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...