1118 matches found
Shwmae
Shwmae Shwmae（シュー・マイ）は、DEF CON 32 で「Abusing Windows Hello Without a Severed Hand」というトークの一環として公開された Windows Hello 悪用ツールです。このツールの目的は、特権ユーザーコンテキストから Windows Hello を悪用することです。 root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate Windows Hello protectors, keys and credentials sign...
ft9201-libfprint
ft9201-libfprint 리눅스 지문 인식 지원을 위한 Focal-systems FT9201 USB 리더기 2808:93a9, 독립형 Windows Hello 동글로 판매됨의 libfprint 드라이버입니다. 센서는 작은 96×96 광학 리더기입니다. libfprint의 내장 매처는 그렇게 작은 이미지에서 성능이 좋지 않으므로, 이 드라이버는 대신 FocalTech 자체 매칭 엔진 — 서명된 Windows 드라이버의 ftWbioEngineAdapter.dll — 을 재사용하며, 작은 인프로세스 PE 로더로 리눅스에서...
howdy
Howdy는 Linux에서 Windows Hello™ 스타일 인증을 제공합니다. 내장 IR 방출기와 카메라를 안면 인식과 함께 사용하여 당신이 누군지 증명하세요. 중앙 인증 시스템PAM을 사용하여, 비밀번호가 필요한 모든 곳로그인, 잠금 화면, sudo, su 등에서 작동합니다. 설치 Howdy는 현재 Debian/Ubuntu, Arch Linux, Fedora 및 openSUSE용으로 패키징되어 제공됩니다. Howdy를 다른 배포판용으로 패키징하는 데 관심이 있다면, 주저하지 말고 이슈를 열어주세요. 참고: dlib 빌드가...
CVE-2017-1000117
CVE-2017-1000117 でサーバーを立ち上げるやつ 次のコマンドを叩いてから、Webブラウザーを立ち上げて http://localhost:8088 にアクセスしてみよう！ root@kitploit: $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 Hello World と表示されたなら、gitをアップデートしよう！脆弱だ。...
Vulnerable-Lab-NextJS-CVE-2025-29927
Next.js Docker Hello World Next.js 12.2 と Docker を使用したシンプルな Hello World アプリケーションです。 前提条件 Docker アプリケーションのビルドと実行 1. Docker イメージをビルドします: root@kitploit: docker build -t nextjs-docker-hello . 2. コンテナを実行します: root@kitploit: docker run -p 3000:3000 nextjs-docker-hello 3. ブラウザを開いてアクセスします: root@kitploit:...
CVE-2024-9224
CVE-2024-9224 Hello World = 2.1.1 - 经过身份验证（订阅者及以上）任意文件读取 描述 WordPress 的 Hello World 插件存在任意文件读取漏洞，影响版本包括 2.1.1 及之前的所有版本，漏洞位于 helloworldlyric 函数中。这使得经过身份验证的攻击者（拥有订阅者及以上权限）能够读取服务器上任意文件的内容，其中可能包含敏感信息。 信息 root@kitploit: Published: 2024-09-30 00:00:00 CVE: CVE-2024-9224 CVSS:...
Next.js-CVE-2025-29927
Next.js Docker デモ Next.js 12.2 と Docker を使用したシンプルな Hello World アプリケーションです。 前提条件 システムに Docker がインストールされていること Node.js 16 以降 ローカル開発用 Docker イメージのビルド Docker イメージをビルドするには、次を実行します: root@kitploit: docker build -t nextjs-docker-demo . コンテナの実行 コンテナを実行するには、次を使用します: root@kitploit: docker run -p 3000:3000...
EUVD-2026-80064
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73446
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73446 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73446
CVE-2026-73446 affects Arista EOS on multiple hardware platforms (710, 720D, 720XP, 750X, 7010TX, 7020R, 7130, 7170, 7050X, 7060X, 7260X, 7280R, 7300X, 7320X, 7358X4, 7368X4, 7388X5, 7500R, 7800R, 7700R, AWE, CloudEOS, cEOS/vEOS-lab, CloudVision eXchange). When IS-IS is configured on a broadcast ...
CVE-2026-73446 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
PT-2026-93218
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in the net/ceph/messengerv2.c file within the Linux kernel before version 6.4.5. There is an integer signedness error, which leads to a buffer overflow and remote code execution via the HELLO command or one of the AUTH frames. This occurs due to an untrusted length value...
Linux Distros Unpatched Vulnerability : CVE-2026-57223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows...
Important: containerd
Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...
CVE-2026-81354
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-72980
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...