frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-90558

sngrep through 1.8.4 is affected by stack buffer overflow vulnerabilities in SIP attribute formatting routines. When header values (e.g., Call-ID, X-Call-ID, or other fields) exceed the 255-byte buffer limit , the overflow can cause crashes or enable arbitrary code execution during packet parsing...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - HotelDruid 3.0.7의 반사형 XSS 취약점 설명 DigitalDruid HotelDruid v.3.0.7의 크로스 사이트 스크립팅 취약점으로 인해 공격자가 creabackup.php 엔드포인트의 ripristinabackup 매개변수를 통해 임의 코드를 실행하고 민감한 정보를 획득할 수 있습니다. 심각도 및 영향 영향 공격자는 인증된 사용자를 속여 조작된 URL을 방문하게 하여 사용자 브라우저에서 악성 JavaScript가 실행되도록 할 수 있습니다. 가능한 결과는 다음과 같습니다: 세...

CVE-2017-6516-mcsiwrapper-

CVE-2017-6516 CVE-2017-6516 — это уязвимость повышения привилегий, которая нацелена на бинарный файл .mcsiwrapper от MagniCorp SysInfo версии ниже 10-H64. Когда этот бинарный файл имеет установленный SUID-бит и является устаревшим, пользователь может выполнить произвольный код от имени владельца...