CVE-2024-0044

CVE-2024-0044/A-307532206 是 Android 框架中的一个高危漏洞，允许具有 adb 访问权限的攻击者以任意应用的 UID 运行任意代码。该漏洞最初由 Meta Red Team X 的 Tom Hebb 发现。你可以在互联网上找到许多关于利用此漏洞的文章，例如这篇和这篇。更多信息请查看此博客：https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html 该漏洞的补丁已包含在 2024年3月 Android 安全公告中，但现在我提出了一个绕过该补丁的利用方法。新补丁已包...

cve_2024_0044

CVE 2024 0044...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044 は、PackageInstallerService.java ファイル内の createSessionInternal 関数で特定された、Android バージョン 12 および 13 に影響を与える高重大度の脆弱性です。この脆弱性により、攻撃者は「run-as any app」攻撃を実行でき、ユーザーの操作を必要とせずにローカルでの権限昇格が可能になります。この問題は、createSessionInternal...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2024-2876

CVE-2024-2876 - Email Subscribers by Icegram Express における SQL インジェクションの脆弱性 概要 CVE-2024-2876 は、WordPress 用プラグイン「Email Subscribers by Icegram Express」で発見された重大なセキュリティ脆弱性です。この脆弱性は 5.7.14 以前のすべてのバージョンに影響し、90,000 以上のウェブサイトに重大なリスクをもたらします。 脆弱性の詳細 CVE-ID : CVE-2024-2876 CVSS スコア : 9.8（緊急） 影響を受けるバージョン :...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

SharpHide

SharpHide DFIR 조사를 혼란스럽게 만드는 간편한 지속성 트릭입니다. NtSetValueKey 네이티브 API를 사용하여 숨겨진널 종료 레지스트리 키를 생성합니다. 이는 UNICODESTRING 키 값 이름 앞에 널 바이트를 추가하여 작동합니다. 이 기술에 대한 자세한 내용은 다음 백서에서 확인할 수 있습니다: https://github.com/ewhitehats/InvisiblePersistence/blob/master/InvisibleRegValuesWhitepaper.pdf 이 도구는 다음 레지스트리 경로를 사용...

cve-2024-0044

CVE-2024-0044 CVE-2024-0044 允许执行“run-as”攻击，从而导致本地权限提升。攻击者可借此访问移动设备上任何应用在本地存储的私有文件，破坏“应用沙盒”（Application Sandbox）所提供的安全保证。 需要启用 ADB shell 访问权限，并在移动设备上开启开发者模式。 影响 Android 12、12L、13 和 14 版本。 由 Meta Red Team X 于 2024 年 3 月发现并披露。 Google 在 2024 年 3 月 Android 安全公告中发布了安全补丁。 使用方法 root@kitploit: python...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

CVE-2026-19816 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...

quick-lookup-ptrun

PowerToys Run용 Quick Lookup 플러그인 이 플러그인은 PowerToys Run용으로, IP 주소, 도메인 이름, 해시 또는 기타 데이터 포인트를 사이버 보안 도구 목록에서 빠르게 검색할 수 있게 해줍니다. 보안 분석가, 침투 테스터, 또는 아티팩트나 알림을 조사할 때 빠르게 정보를 조회해야 하는 모든 사람에게 적합합니다. 설치 참고: Power Toys Run v0.72.0 또는 v0.73.0부터 릴리스 노트에 언급되지 않아 100% 확실하지는 않음, Powertoys Run 플러그인 디렉토리가 변경되었습니...

CVE-2026-55236

CVE-2026-55236 is an incomplete authorization flaw in langgraph-api (the LangGraph Server runtime) prior to version 0.10.0. The run-creation path dispatched the assistants.search authorization event with an incomplete value instead of assistants.read , so in deployments whose custom resource hand...

CVE-2026-55236 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.read event used by direct reads and cro...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044는 PackageInstallerService.java 파일의 createSessionInternal 함수에서 발견된 고심각도 취약점으로, Android 12 및 13 버전에 영향을 미칩니다. 이 취약점은 공격자가 "run-as any app" 공격을 수행할 수 있게 하여 사용자 상호작용 없이 로컬 권한 상승을 유발합니다. 이 문제는 createSessionInternal 함수 내 부적절한 입력 검증으로 인해 발생합니다. 공격자는 세션 생성 과정을 조작하여 이 취약점을 악용할 수...

android_autorooter

Android Autorooter これは、以下の作業の可能性をさらに探るための単なるメモです： https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html https://tinyhack.com/2024/06/07/extracting-whatsapp-database-or-any-app-data-from-android-12-13-using-cve-2024-0044/?s=03...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run root@kitploit: git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide root@kitploit: | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Correctly track subprogram poke descriptors and fix use-after-free Subprograms call mappoketrack, but during program release, there is no hook to call mappokeuntrack. However, during program release, the auxiliary memory and...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: Fixed a bug where sleep was performed from an invalid context in btrfsqgroupinherit. Syzkaller reported the bug as follows: Bug: A sleep function is called from an invalid context at include/linux/sched/mm.h:274 Ca...