CVE-2021-4034

CVE-2021-4034 Version compatible avec CentOS 8 pour CVE-2021-4034 Basé sur une modification de https://github.com/berdav/CVE-2021-4034/tree/main/dry-run Méthode d'utilisation Modifiez la fonction system dans pwnkit-dry-run.c pour exécuter une commande personnalisée par défaut, elle ajoute...

CVE-2021-4034

CVE-2021-4034 Ceci est un POC pour la vulnérabilité trouvée dans le binaire pkexec de polkit, utilisé pour exécuter des programmes en tant qu'un autre utilisateur. Pour une étude approfondie : https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Exécution root@kitploit: gcc poc.c -o p...

GHSA-WW6M-CW3F-Q94G NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'

nltk.stem.PorterStemmer.stem -- a ubiquitous public API applied to arbitrary, often untrusted, tokens -- runs in On^2 time on a token containing a long run of the letter 'y', letting a single 20-50 KB token pin a CPU core CWE-407. Root cause isconsonantword, i was made iterative commit for 3633,...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploitez CVE-2024-0044 pour l'élévation de privilèges Android afin de télécharger les fichiers sandbox de toute application cible. Utilisation root@kitploit: ./CVE-2024-0044.sh Paramètres root@kitploit: Chemin d'un fichier APK local quelconque Nom du paquet de l'application cib...

CVE-2024-0044-EXP

CVE-2024-0044-EXP استغلال CVE-2024-0044 لعمل نسخ احتياطية للبيانات على أندرويد 12 و13 قبل تحديث الأمان لشهر مارس 2024 الاستخدام ./CVE-2024-0044-EXP.sh مثال ./CVE-2024-0044-EXP.sh com.tencent.mm شرح اكتشاف الثغرة https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html التحقق ...

CVE-2016-5195

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w إثبات مفهوم لنظام Android يُوضّح هذا المستودع الثغرة على أجهزة Android المعرّضة للخطر والمتصلة عبر ADB. لا يقوم بتعطيل SELinux انظر https://github.com/timwr/CVE-2016-5195/issues/9 ولا بتثبيت superuser على الجهاز. root@kitploit: $ make root...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

نظرة عامة بعد قراءة مقال @zhero في منشوره الشخصي على مدونته، قررت بناء مسابقة CTF هذه لتعلم كيفية عمل الأشياء، وبعد ذلك قررت مشاركتها مع أي شخص يريد تعلم كيفية استغلال هذه الثغرة. حاولت إنشاء المسابقة باستخدام الإصدار [email protected]، لكن عندما فحصت @remix-run/express لاحظت أنهم قاموا بتصح...

CVE-2023-26256

CVE-2023-26256 -hالحصول على المساعدة -uتشغيل URL واحد -f تشغيل دفعة...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Remarque : Cette documentation et le code d'exploit ont été générés avec l'aide de l'IA Kiro. Vérifiez avant utilisation — l'IA peut faire des erreurs et en fait. Appareil Champ| Valeur ---|--- Modèle| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core...

MGASA-2026-0349 Updated python-hpack packages fix a security vulnerability

An issue was found in the python-hyper/hpack library, most commonly used as a downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively...

c-CVE-2024-0044

CVE 2024 0044 تم تحديد CVE-2024-0044، في الدالة createSessionInternal في ملف PackageInstallerService.java، وهو ثغرة أمنية عالية الخطورة تؤثر على إصدارات Android 12 و 13. تسمح هذه الثغرة للمهاجم بتنفيذ هجوم "run-as any app"، مما يؤدي إلى تصعيد الامتيازات محليًا دون الحاجة إلى تفاعل المستخدم. تنشأ...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

CVE-2024-0044

CVE-2024-0044 Aperçu CVE-2024-0044 est une vulnérabilité découverte dans certaines applications Android qui permet à des attaquants d'élever leurs privilèges en exploitant une faille dans la commande run-as. Cette vulnérabilité peut être exploitée en créant une charge utile spécifique qui accorde...

CVE-2023-36123

CVE-2023-36123 Solo a scopo dimostrativo. L'exploit funziona su tutte le versioni di Plain Craft Launcher 2. Scarica Custom.xaml e importalo in Plain Craft Launcher 2, quindi fai clic su "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

CVE-2026-81722

nltk PorterStemmer in versions ≤ 3.10.2 is vulnerable to an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The root cause is that the _is_consonant() helper walks backward over the entire run of trailing 'y' characters on every call, and _measure() invokes it for ea...

CVE-2026-81722 nltk PorterStemmer before 3.10.3 Quadratic-time DoS

nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...

CVE-2026-58474 whichllm < 0.5.16 Code Injection via run and snippet commands

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

EUVD-2026-64852

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

Astra Linux – Vulnerability in containerd-app

Containerd is an open-source container runtime. A bug was discovered in Containerd prior to versions 1.6.38, 1.7.27, and 2.0.4. In these versions, containers launched with a User set as UID:GID that exceeded the maximum 32-bit signed integer could cause an overflow condition, resulting in the...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files, due to improper handling of offset and length tables...