chakra-exploit-framework

Chakra 利用框架 该仓库包含我为准备 EXP-401 课程 而编写的浏览器利用框架。该框架针对 Chakra 引擎，该引擎在 2019 年 Edge 切换到 v8 之前一直是 Edge 的一部分。 该框架中使用的演示漏洞是 CVE-2019-0567 类型混淆漏洞。 功能特性 为了让这个框架易于使用，我编写了一些很棒的功能，使得实现未来的沙箱逃逸变得非常容易。 抽象化的 Windows API 调用 该框架允许以高层方式调用 Windows API。它使用 GetProcAddress ROP 链来解析任意 API，并支持最多四个参数。 root@kitploit: functio...

Chakra-CVE-2019-0567

Chakra-CVE-2019-0567 chakracoreフレームワークにおける型混同の脆弱性のPOCであり、コード実行に至ります。 Connor McGar氏のブログ https://connormcgarr.github.io/ に基づいています。 注意: オフセットとROPガジェットは使用するWindowsのバージョンに依存するため、お使いの環境では動作しない可能性があります。私のコードをConnorのPOCと比較すると、ほとんどのオフセットが異なっていることがわかります。これは、私自身でROPガジェットを見つけなければならなかったからです。...

CVE-2023-0567

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

MiracleLinux 9 : php:8.1 (AXSA:2024-7477:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7477:01 advisory. php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: DoS vulnerability when parsing multipart request body CVE-2023-0662 php:...

MiracleLinux 8 : php:7.4 (AXSA:2024-9405:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9405:01 advisory. php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: Passwordverify always return true with some hash CVE-2023-0567 php: Missing...

MiracleLinux 8 : php:8.0 (AXSA:2023-6531:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6531:01 advisory. php: XML loading external entity without being enabled CVE-2023-3823 php: phar Buffer mismanagement CVE-2023-3824 php: 1-byte array overrun in commo...

CVE-2026-0567

creationtimestamp| type| source ---|---|--- 2026-01-02 21:57:20+00:00| seen| Telegram/cyCwqrn22MLiSZIDn3i5ho6p3CpdRCTqLfMNkNEqMCDm1Ys...

CVE-2021-0567

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

Alibaba Cloud Linux 3 : 0277: php:7.4 (ALINUX3-SA-2024:0277)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0277 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-0567: In PHP 8.0.X before 8.0.28,...

CLSA-2025-1744390816 gnutls: Fix of CVE-2024-0567

CVE-2024-0567: detect loop in certificate chain...

Advisory ROSA-SA-2025-2607

software: gnutls 3.8.4 OS: ROSA-CHROME packageevrstring: gnutls-3.8.4-1 CVE-ID: CVE-2024-0553 BDU-ID: 2024-00707 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the GnuTLS transport layer cryptographic library is related to a difference in response time when processing an RSA ciphertext in a...

CVE-2025-0567

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

CVE-2025-0567

creationtimestamp| type| source ---|---|--- 2025-01-19 07:36:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113853870369097131 2025-01-19 07:58:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2314 2025-01-19 08:15:24+00:00| seen|...

AlmaLinux 8 : php:7.4 (ALSA-2024:10952)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10952 advisory. php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: Passwordverify always return true with some hash CVE-2023-0567 php: Missing erro...

Oracle Linux 8 : php:7.4 (ELSA-2024-10952)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10952 advisory. - Fix cgi.forceredirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered...

ALSA-2024:10952 Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: Passwordverify always return true with some hash CVE-2023-0567 php: Missing error check and insufficient random bytes in...

RHEL 8 : php:7.4 (RHSA-2024:10952)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10952 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: 1-byte array overrun in common...

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Verification of Cryptographic Signature in the RHEL UBI (CVE-2024-0567)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. CVE-2024-0567. Vulnerability Details CVEID:CVE-2024-0567 DESCRIPTION: GnuTLS is vulnerable to a denial of service, caused by a flaw...

Photon OS 4.0: Gnutls PHSA-2024-4.0-0556

An update of the gnutls package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0556. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: gnutls (CVE-2024-0567)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0567 advisory. - A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with...