CVE-2026-14382

CVE-2026-14382 Bin 触发器 Bug 修复 root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 此漏洞的根本原因似乎与 CVE-2025-6558 相似。基于我目前的分析，我怀疑它可能是 CVE-2025-6558 的一个变体。因此，我改编了 CVE-2025-6558 的 PoC，并创建了以下文件： poc.c 是主要的 PoC，但仅适用于 ...

CVE-2020-0022

CVE-2020-0022 非常感谢 Insinuator 的精彩博文和代码！ 结果 Insinuator 帖子中提到的所有步骤都已完成，而且还不止于此。要把这些步骤写进 README.md 文件实在太多了，所以请随意查看上面提到的 Insinuator 的帖子。 该漏洞利用已完全完成，达到了以下程度： 1. 攻击者控制的足够大的内存区域的地址被泄漏 2. 程序计数器被修改为指向自定义地址 3. 自动进行重试，显著降低了失败的概率 4. 代码在断开连接时间和内存搜索速度方面进行了优化，已达到进一步优化会危及漏洞利用稳定性的程度 差异与改进 此漏洞利用与 Insinuator...

Specter-FlipperZero

Specter 👻 扫除你看不见的读卡器。 -26E8CA?style=for-the-badge&labelColor=0a0f16 Specter 将你的 Flipper Zero 变成一台口袋大小的反监控扫描仪 ，用于检测 活跃的 13.56 MHz NFC 读卡器 。它会 被动监听 通电读卡器持续发射的射频场——无论是被塞进支付终端里的隐藏卡片盗刷器、藏在门板后面的隐蔽读卡器，还是被胶带粘在桌下的恶意记录器——然...

pixma

这是什么？ 一些用于分析佳能 PIXMA 系列打印机固件的小工具。 动机 某些 Pixma 打印机无法重置废墨计数器，现在拒绝打印，即使废墨容器已被更换。因此，我对其固件的内部工作原理感到好奇，试图找到重置计数器的方法。但后来我放弃了。尽管如此，这个过程很有趣，或许对其他研究人员也有用？基本上，我只是实现了 https://www.contextis.com/en/blog/hacking-canon-pixma-printers-doomed-encryption 中描述的方法。 如何使用？ 1. 下载固件 查看 Pixma 打印机的 USB 设备 ID，例如 04a9:1769...

twint-utils

twint-utils 这些是 Twint 的实用工具。请查看我们的协作指南以参与贡献。 互关检测器 Mufos.py 使用 Twint 检测指定种子账号的互关关注者。它可以集成到用于社交网络或环境检测的其他更复杂的流程中。目前对于粉丝/关注量巨大的账号来说，它太慢而无法实用。这里有一个托管版本，你可以在游乐场模式下打开并试用。 媒体下载器 接受 twint.output.tweetslist 作为参数。 root@kitploit: from twintutils.tweets import mediadownloader tweets = twint.output.tweetslis...

SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields. id: CVE-2020-5766 info: name: SRS Simple Hits Counter 1.0.3-1.0.4...

Umbrella_android

Umbrella Umbrella es una aplicación móvil para Android desarrollada por Security First que proporciona a los defensores de derechos humanos la información sobre qué hacer en cualquier situación de seguridad y las herramientas para hacerlo. Permite al usuario elegir lo que quiere hacer, como:...

CVE-2020-0022

CVE-2020-0022 非常感谢 Insinuator 提供的精彩博文和代码！ 结果 Insinuator 博客中提到的所有步骤都已完成，甚至更多。这些步骤太多，无法完整放入 README.md 文件，因此请自行查阅上述 Insinuator 的博文。 该漏洞利用已完成到以下阶段： 1. 泄漏了攻击者控制的足够大的内存区域地址 2. 程序计数器被修改为指向自定义地址 3. 自动重试直到失败概率显著降低 4. 在断开时间和内存搜索速度方面进行了优化，以至于进一步优化会损害漏洞利用的稳定性 差异与改进 此漏洞利用与 Insinuator 的实现有以下不同： 1. 它用 C 语言编写而非...

SUSE CVE-2026-72376

In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net-cellsoutstanding Fix net-cellsoutstanding being incremented before the check for failure of idralloccyclic, leaving the count incremented on error...

kernel: mm/huge_memory: update file PMD counter before folio_put()

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

CVE-2026-1801C

CVE-2026-1801C QUANTUM-SHIFT / CVE-2026-180A7 BAL-JUMP: Analisi Statica delle Euristiche di Input di Movimento in Source 2 server.dll Abstract Questo documento presenta un'analisi statica di reverse-engineering di due routine di verifica del movimento lato client implementate nel motore di...

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Summary On the SFT add-quantity path the only supply bound is SFTAddCirculation, which does meta.Circulation += amount with no overflow guard, then checks if meta.Circulation meta.MaxSupply && meta.MaxSupply != 0. If amount overflows int64 and wraps negative, negative MaxSupply is false, the cap...

CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

UBUNTU-CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

EUVD-2026-67481

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2026-80605

CVE-2026-80605 affects the Linux kernel in the HID: picolcd driver, specifically the picolcd_send_and_wait() function. The root cause is an integer overflow of the signed loop counter k: if the loop executes more than INT_MAX times, k wraps to a negative value, causing the condition k

CVE-2026-80605 HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2025-51675

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

CVE-2025-51675

CVE-2025-51675 affects the openRISC OR1200 RISC-V processor, specifically at commit 83ac6b . The vulnerability stems from an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can result in a Denial of Service (DoS) . The CVSS 3.1 score is 7.5 (HI...