CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC In Version 2.0.19 von Flawfinder findet keine Dateinamen-Sanitisierung statt, wenn möglicherweise bösartige Dateinamen geparst werden. Bekannte betroffene Terminals basieren auf libvte, und das folgende Beispiel zeigt ein mate-Terminal. Dieser Exploit wurde seitdem in...

Fnord

Fnord Fnord é um extrator de padrões para código ofuscado Descrição O Fnord tem duas funções principais: 1. Extrair sequências de bytes e criar algumas estatísticas 2. Usar essas estatísticas, combinar comprimento, número de ocorrências, similaridade e palavras-chave para criar uma regra YARA 1...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

EUVD-2026-66399

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server Path Traversal Übersicht CVE-2021-41773 ist eine Path-Traversal-Schwachstelle, die den Apache HTTP Server 2.4.49 betrifft. Die Schwachstelle ermöglicht es einem Angreifer, unter bestimmten Konfigurationen auf Dateien außerhalb des vorgesehenen Verzeichnisse...

CVE-2019-12735

CVE-2019-12735 Diese CVE wurde nach neovim 0.3.6 und vim 8.1.1365 behoben POC root@kitploit: vim demo1.txt Remote-Shell 1. Erstelle eine Schadtextdatei: root@kitploit: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Starte den Client in einer anderen Sitzung: root@kitploit: nc -vlp 9999 3. Öffne die...

CVE-2023-21554

MSMQ भेद्यता प्रूफ ऑफ कॉन्सेप्ट इस रिपॉजिटरी में एक रेडी-टू-रन प्रूफ ऑफ कॉन्सेप्ट है जो TCP पोर्ट 1801 पर सुनने वाली Microsoft Message Queuing को लक्षित करता है। यह कार्य मूल प्रोजेक्ट की सामग्री पर आधारित है और उसका उपयोग करता है: https://github.com/leongxudong/MSMQ-Vulnerability यह रिपॉजिटरी उस...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

EUVD-2026-64991

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Defensive Schwachstellenanalyse Überblick Dieses Repository dokumentiert eine defensive Analyse von CVE-2009-4496 , einer historischen Schwachstelle im Zusammenhang mit dem Boa-Webserver. Das Ziel dieses Projekts ist es, die Schwachstelle aus einer defensiven Sicherheitsperspektiv...

CVE-2024-36039_PoC

CVE-2024-36039: Iniezione di Oggetti PyMySQL a SQL Injection PoC Un laboratorio Proof of Concept PoC completo e riproducibile per CVE-2024-36039 , che dimostra come una vulnerabilità di Object Injection in PyMySQL versioni = 1.1.0 possa essere elevata a una SQL Injection completa utilizzando le...

CVE-2026-75483

powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render when the shell enters affected directori...

CVE-2026-75483 powerlevel10k Control Character Injection via package.json Version

powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render when the shell enters affected directori...

CVE-2026-75483

powerlevel10k fails to sanitize control characters in the package.json version field when rendering the package prompt segment, allowing an attacker to embed raw escape bytes that emit arbitrary terminal control sequences on each prompt render when a user enters a compromised directory. CVSS 3.1 ...

PT-2026-76810

Name of the Vulnerable Software and Affected Versions powerlevel10k affected versions not specified Description The software fails to neutralize control characters within the version field of a package.json file when rendering the package prompt segment. This allows an attacker to inject raw esca...

UBUNTU-CVE-2026-73480

gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...

CVE-2026-73480 gdu Terminal Injection via Unstripped Escape Sequences

gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...

CVE-2026-73480

gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...

CVE-2026-73480 gdu Terminal Injection via Unstripped Escape Sequences

gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...