CVE-2020-27976

CVE-2020-27976 Эксплойт osCommerce Phoenix CE . Это дало лучшие результаты во время тестирования. Символы новой строки в полезной нагрузке заменяются пробелами перед загрузкой. ================== Источники: https://www.tenable.com/cve/CVE-2020-27976...

B2R2

B2R2 B2R2 — это полностью управляемый фреймворк для бинарного анализа, написанный на F. Он предоставляет богатый набор алгоритмов, функций и инструментов для реверс-инжиниринга, анализа программ и инспекции на бинарном уровне. Название B2R2 вдохновлено R2-D2, культовым роботом из «Звёздных войн»...

F-Scrack

Pour éviter une utilisation malveillante de ce script, ce projet a été supprimé...

see

Environnement d'exécution en bac à sable :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Téléchargement: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

F-logic DataCube3 - SQL Injection

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 익스플로잇 이 익스플로잇은 Cable Haunt 취약점을 이용하여 로컬 네트워크 접근만으로 Sagemcom F@ST 389050.10.19 케이블 모뎀에 셸을 띄웁니다. 펌웨어 버전 50.10.21 이상은 Cable Haunt에 대해 안전해야 합니다. 이 개념 증명PoC은 악의적인 목적의 사용 가능성을 제한하기 위해 오직 로컬에서만 작동하도록 특별히 설계되었습니다. Technicolor TC7230에 대해 외부 연결로 리버스 셸을 만드는 또 다른 PoC는 여기에서 확인할 수 있습니다. 알려진 ...

RTOS-F-16-Exploit---CVE-2019-7711

Эксплойт для Green Hills INTEGRITY RTOS F-16 - CVE-2019-7711 Полная цепочка эксплуатации форматной строки Реалистичная атака на авионику F-16 при наземном обслуживании 📋 Описание Этот репозиторий содержит Proof of Concept PoC для CVE-2019-7711 — уязвимости форматной строки в Telnet-сервере...

CVE-2026-24061-lab

CVE-2026-24061 — Лаборатория воспроизведения ⚠️ Только для образовательных целей. Изолированная лабораторная среда. Français ci-dessous Краткое описание Критический обход аутентификации CVSS 9.8 в GNU InetUtils telnetd ≤ 2.7. Внедряя -f root в качестве переменной USER через опцию Telnet NEWENVIRON...

Tylium

Tylium 침입 탐지, 보안 분석 및 위협 헌팅을 위한 주요 데이터 파이프라인 이 파일들은 표준 시스템 로그 외에도 EDR엔드포인트 탐지 및 대응 데이터를 생성하기 위한 구성을 포함합니다. 이러한 구성은 F/OSS무료 및/또는 오픈 소스 도구를 사용하여 이러한 데이터 스트림을 생성할 수 있게 합니다. F/OSS 도구는 Linux용 Auditd, Windows용 Sysmon, Mac용 Xnumon으로 구성됩니다. 또한 Suricata 이벤트 및 규칙 구성을 위한 노트 세트도 포함되어 있습니다. 이러한 데이터 세트는 위협 헌팅...

f-for-java

f-for-java go と java で書かれたプロジェクトです。CVE-2021-44228 のために放棄しました。直せるなら直してみて XD JAVA のモジュールは私のものではありません...

CVE-2024-25832-PoC

CVE-2024-25830 et CVE-2024-25832 - Contrôle d'accès inapproprié et téléchargement de fichier sans restriction sur DataCube3. Aperçu Ce dépôt contient une preuve de concept PoC pour une chaîne d'exploitation en deux étapes ciblant les dispositifs DataCube3. Il combine CVE-2024-25830 Contrôle d'acc...

FMD Android

FMD Android Encuentra tu dispositivo a través de SMS, mensajería instantánea o una interfaz web FMD Server. FMD te permite localizar, hacer sonar, borrar y enviar otros comandos a tu dispositivo cuando está perdido. Su objetivo es ser una alternativa de código abierto segura a Encontrar mi...

CVE-2026-71368

F-RevoCRM contains a stored/reflected XSS flaw; an authenticated user viewing a crafted page may have unintended actions performed on their session. CVSS 3.0 scores 6.1 MEDIUM (network, no privileges, active user interaction). No exploitation or fix details are provided in the documents. Monitor ...

EUVD-2026-63208

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

PT-2026-72615

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF F PREORDER replace effective prog and purge effective progs located the slot in the effective array by walking the program hlist and counting entries linearly. That count does not matc...

CVE-2026-72693

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

CVE-2026-72693

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

EUVD-2026-55468

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response from process context. The delayed work uses ftcm private state and ma...

UBUNTU-CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...