dbdtct

dbgdtct Descripción dbgdtct es una herramienta basada en Python diseñada para ayudarte a detectar si una aplicación web está desplegada en modo de depuración—una configuración incorrecta crítica que puede exponer información sensible y aumentar el riesgo de explotación en entornos de producción...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

AntiDebug-AntiVM

AntiDebug/AntiVM Purpose This repository hosts the different debug/vm detection methods I have come across whilst looking through the WinAPI. This is not intended to be compiled and ran but rather to show examples of how to implement these different methods into your existing projects. Each file ...

Anti_suspend

Antisuspend Just an example of using shellcode to secure a process. Prevents: 1Freezing process threads you can use anti-attach for debugger 2Hardware breakpoints 3Hide thread from the debugger Problem: Use code in non legit modules This will raise the flags of AV...

CVE-2024-27914

CVE-2024-27914: Reflected XSS in debug mode of GLPI An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. Package - GLPI...

WTSRM2

WTSRM2 This is a continuation to my original project WTSRM and the corresponding talk. This project was re-written in order to utilize C++17 in order to create a template that allows us to change the required functionality at compile time with ease! This is implemented as a header only file such...

CVE-2025-34171

CVE-2025-34171: Unauthenticated File and Debug Data Exposure in CasaOS Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34171 Affects| CasaOS ≤ 0.4.15 Fixed in| No Patch Available Severity| Medium CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-862:...

CVE-2023-42793-TeamCity-Unauthenticated-RCE

CVE-2023-42793 - Herramienta de Evaluación de Seguridad para JetBrains TeamCity Este repositorio proporciona una utilidad basada en Python diseñada para evaluar y demostrar las implicaciones de seguridad de CVE-2023-42793 , una vulnerabilidad crítica que afecta a los servidores JetBrains TeamCity...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

CVE-2026-85478

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-77610

Semantic MediaWiki prior to version 7.2.0 is affected by a reflected XSS in its query debug output. The SMW\Query\DebugFormatter class assembles debug output (format=debug on Special:Ask) as raw HTML, and several sinks — buildHTML(), prettifySQL(), and prettifyExplain() — apply no output-context ...

EUVD-2026-83186

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML...

GHSA-Q5FM-9MX6-44F4 Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

Query debug output XSS Failure mode Semantic MediaWiki's query debug output format=debug, or the debug request parameter on Special:Ask is assembled by SMW\Query\DebugFormatter and emitted as raw HTML. Several of its sinks apply no output-context encoding, so attacker-controlled query input is...

CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

EUVD-2026-83046

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-85478

The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...

CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...

CVE-2026-81943 PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switches (V1 and V2) ship with active debug functionality in the embedded software. An attacker with privileged (HIGH) local access can enable debug mode to execute arbitrary code on the underlying OS and gain root-level access . Affected firmware version...