CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 में 'अपलोड फ़ंक्शन' के माध्यम से रिमोट कोड निष्पादन भेद्यता। सरल Python PoC. खोजकर्ता: @christasa: https://github.com/bludit/bludit/issues/1081 उपयोग स्क्रिप्ट में अपना URL, उपयोगकर्ता नाम, पासवर्ड और निष्पादित करने का कमांड संपादित करें फिर स्क्रिप्ट चलाएँ:...

go_parser

محلل ثنائيات Go آخر لـ IDAPro English |中文 ملاحظة : الفرع الرئيسي الحالي master هو إصدار Python3. تم تغيير الفرع الرئيسي القديم إلى فرع py2 ، وهو غير مدعوم مؤقتًا. تعليمات لفرع Python3 تم تطوير هذا الإصدار واختباره على macOS/Windows و IDA7.4+ و Python3.8.x. إذا كانت هناك مشاكل على منصات أو إصدارات...

qs: qs: Denial of Service via improper validation in stringify function

A flaw was found in qs. The qs.stringify function, responsible for serializing objects, does not properly validate the isBuffer property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then...

CVE-2026-85040

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

CVE-2022-32981

CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...

ida_ifl

IFL - Liste interactive des fonctions Licence : CC-BY https://creativecommons.org/licenses/by/3.0/ Un petit plugin conçu pour offrir un moyen convivial de naviguer entre les fonctions et leurs références. De plus, il permet d'importer dans IDA les rapports générés par exemple par PE-sieve. Prend ...

CVE-2024-5961

CVE-2024-5961 2ClickPortal의 반사형 XSS 버전: 7.2.31부터 7.6.4까지. intext:"Powered by 2ClickPortal" PoC root@kitploit: https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

test_iconv

CVE-2024-2961 का परीक्षण V1 - विश्लेषणाधीन यह रिपॉजिटरी CVE-2024-2961 के परीक्षण के लिए एक C प्रोग्राम रखती है, जिसमें GNU C लाइब्रेरी glibc के iconv फ़ंक्शन में बफर ओवरफ्लो कमज़ोरी शामिल है। PHP के हीप की संरचना के कारण, इस ओवरफ्लो का उपयोग फ्री लिस्ट पॉइंटर के एक भाग को संशोधित करने के लिए किया...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header root@kitploit: spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build root@kitploit: wget...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function हेडर root@kitploit: spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" बिल्ड root@kitploit: wget...

Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE...

Detection-script-for-cve-2021-23358

Detection-script-for-cve-2021-23358 سكربت كشف لـ CVE-2021-23358 لقد أنشأت سكربت كشف لـ CVE-2021-23358، والذي سيكتشف الإصدار الضعيف من underscore في Node، سواء تم تثبيته كأداة مفتوحة المصدر أو تم استخدام المكتبات فقط. يتميز هذا السكربت بثلاث ميزات، حيث سيكتشف إصدارات underscore من: 1. استخدام أمر...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote Command Execution CVE-2014-6287 🚨 About the Exploit This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer HFS v2.3.x , identified as CVE-2014-6287. By abusing the vulnerable search functionality...

polypyus

Polypyus - L'historien de firmware Polypyus apprend à localiser des fonctions dans des binaires bruts en extrayant des fonctions connues de binaires similaires. C'est donc un historien de firmware. Polypyus fonctionne sans désassembler ces binaires, ce qui est un avantage pour les binaires...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

Obfu-DE-Scate

🤖 ObfuDEscate: A De-obfuscation and Comparison tool for Android APKs. 📱 ObfuDEscate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK - even if the functions have been renamed as part of obfuscation. With fuzzy comparison logic,...

CVE-2026-85172 n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic checks the uri property for SSRF safety while the underlying HTTP client uses the url property when both are present,...

CVE-2026-85172

n8n versions before 2.34.1 contain a server-side request forgery (SSRF) vulnerability in the legacy request helper function exposed to Code and Function nodes. The root cause is a mismatch between validation and execution: the SSRF check inspects the uri property, while the underlying HTTP client...

Spring-CVE

Spring CVE 이것은 CVE-2022-22963 Spring SpEL / Expression Resource Access Vulnerability과 CVE-2022-22965 SpringShell이라고 불리는 spring-webmvc/spring-webflux RCE를 포함합니다. CVE-2022-22963 Spring Cloud Function 버전 3.1.6, 3.2.2 및 지원되지 않는 이전 버전에서 라우팅 기능을 사용할 때 사용자가 특수하게 조작된 SpEL을 routing-expression으로 제공하면 원격 코드...