OrganizerTransaction

これはCVE-2021-39749のPoCであり、Android 12L Betaで、他のアプリのpermissionやexported設定に関係なく、そのアクティビティを起動できるようにするものです。 Android 12Lでは、TaskFragmentOrganizerへのアクセスは（意図的に）MANAGEACTIVITYTASKS権限を必要としなくなりました ここで提供されるアプリを使用するには、Hidden API Checksを無効にする必要があります。adb shell settings put global hiddenapipolicy...

preflight

Preflight.sh Preflight.sh는 코드베이스를 스캔하여 출시 준비 상태를 확인하는 명령줄 도구입니다. 프로덕션에 배포하기 전에 누락된 구성, 통합 문제, 보안 우려 사항, SEO 메타데이터 누락 및 기타 일반적인 실수를 식별합니다. 프로덕션에서 망신을 당하지 마세요. 그냥 명령을 실행하세요. 설치 Homebrew macOS/Linux brew install preflightsh/preflight/preflight npm npm install -g @preflightsh/preflight Go go install...

CVE-2010-1240

CVE-2010-1240 - PDF에 백도어 삽입 ⚠️ 교육 및 승인된 보안 연구 목적으로만 사용하세요 Description Windows 및 Mac OS X에서 Adobe Reader 및 Acrobat 9.x9.3.3 미만 및 8.x8.2.3 미만는 파일 실행 경고 대화상자의 한 텍스트 필드 내용을 제한하지 않습니다. 이로 인해 원격 공격자가 PDF 문서에 지정된 임의의 로컬 프로그램을 실행하도록 사용자를 속이기 쉬워집니다. 이는 열기 버튼을 클릭하면 사용자가 암호화된 메시지를 읽을 수 있다고 주장하는 텍스트 필드를 통해...

porterminal

Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...

sdrtrunk

MacOS Tahoe 26.1 사용자 - 주의: Tahoe 26.x 버전의 USB 지원 변경으로 인해 sdrtrunk가 실행되지 않습니다. 최신 libusb를 설치하고 심볼릭 링크를 생성한 후, ARM 프로세서용 Tahoe에 업데이트된 usb4java 네이티브 라이브러리가 포함된 나이틀리 빌드를 사용하려면 다음을 수행하십시오. MacOS에서 USB SDR 튜너에 접근하는 데 여전히 문제가 있을 수 있습니다. brew install libusb --HEAD cd /opt sudo mkdir local cd local sudo...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

PT-2026-106748

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run shell tool in the CommandLineExecutor component of ufo/client/mcp/local servers/cli mcp server.py validates only the first token of the bash command parameter and permits...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy（混乱した代理人）脆弱性 - セキュリティ研究検証プロジェクト 重要な声明 本リポジトリは派生ビルドリポジトリであり、元のメインリポジトリの付属関係にあります。 役割| リポジトリ| 説明 ---|---|--- メインリポジトリ| inforcqb/cve-2026-0013-exploit| オリジナルの脆弱性研究 本リポジトリ| XiaoBaiLovesStirring/cve-2026-0013-poc| クラウドビルド成果物の配布 セキュリティプロトコル...

CVE-2019-12594

CVE-2019-12594 이는 DOSBox 0.74-2의 취약점인 CVE-2019-12594에 대한 PoC입니다. DosBox 0.74-2에서 호스트의 계산기를 실행하는 모습 이 취약점의 PoC는 다음 구성에서 테스트되었습니다: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

vibe-coding-security

Vibe Coding セキュリティ ローンチをツイートする前に、この69項目のチェックを実行してください。これらは、Lovable RLS CVE（CVE-2025-48757、170以上のアプリ、2025年）、Moltbook の漏洩（150万のAPIトークン、2026年2月）、そして2026年4月の Lovable プラットフォーム侵害（他ユーザーのプロジェクトのソースコード＋サービスキー、約2.5か月間露出）の背後にある正確なパターンに対応しています。 完全版キットが欲しいですか？...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer の認証なしHTTPサービス CVE-2019-6447 に対して独立に実装された、安全性に配慮した研究用ハーネスと技術分析です。これは、Android 版 ES File Explorer の脆弱なバージョンが公開する認証なしHTTPサービスを対象としています。 許可された研究のみに使用してください。 このプロジェクトは、自分が所有するデバイス、またはテストの明示的な許可を得たデバイスに対してのみ使用してください。CLI...

CVE-2010-1240

CVE-2010-1240 PDF 실행 액션 연구 도구 CVE-2010-1240 취약점을 악성 PDF 실행 액션을 통해 시연하는 교육용 연구 도구입니다. ⚠️ 면책 조항 이 도구는 교육 목적 과 보안 연구 를 위해 CVE-2010-1240 취약점을 시연하기 위해 엄격하게 제작되었습니다. PDF 보안 메커니즘과 취약점 연구 학습을 위해 통제된 환경에서만 사용해야 합니다. 악의적인 목적으로 이 도구를 사용하지 마십시오. 📋 설명 이 프로젝트는 악성 PDF 실행 액션을 통해 임의 코드 실행을 허용하는 Adobe Reader의 중요한...

CLEANSTART-2026-XZ43182 launch-editor allows users to open files with line numbers in editor from Node

Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...

automation-controller: automation-controller-container: automation-controller: bulk job launch allows setting a workflow node's job reference to an arbitrary unified job, enabling a low-privileged user to cancel and read metadata of jobs in other organizations

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job --...

automation-controller: automation-controller-container: automation-controller/AWX: Bulk Job Launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

CVE-2026-84689

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job --...

CVE-2026-40534

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...

CVE-2026-67071

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

CVE-2026-67071 HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...