NoArgs

NoArgs: Manipulating and Hiding Process Arguments Twitter: @AzizWho Disclaimer: Educational Use Only This tool is intended solely for educational purposes. I am not liable for any misuse and all users must adhere to applicable laws. Illegal use is prohibited. Introduction NoArgs is a tool designe...

CVE-2026-104634

The beam_mcp library (versions 0.1.0 to before 0.10.1 ) contains an Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server . Due to a flaw in normalize_arguments/2 and to_json_value/1, JSON true , false , and null tool arguments are incorrectly converted to the strings "true" , "false"...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

BRC4-BOF-Artillery

Generic This repository includes a collection of generic BOFs I wrote over a period of time. This repository solely focuses on porting and execution, without modifying the original source for stability. While I may conduct further testing in the future, this is not officially supported. Contact...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

Symfony Profiler - Remote Access via Injected Arguments

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

CVE-2024-23742

CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...

wuzz

wuzz Outil CLI interactif pour l'inspection HTTP. Les arguments de la ligne de commande de Wuzz sont similaires à ceux de cURL, il peut donc être utilisé pour inspecter/modifier les requêtes copiées depuis l'inspecteur réseau du navigateur avec la fonctionnalité "copy as cURL". Installation et...

CVE-2024-24576.jl

CVE-2024-24576 PoC in Julia λ julia main.jl Enter arguments: hello Output: Argument received: hello λ julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" λ julia main.jl Enter arguments: hello" & whoami Output: Argument received: "hello" desktop-9zk7mal\lpn...

USN-8892-1 wsl-pro-service vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: A NULL pointer dereference was fixed in qlcnic83xxaddrings. In qlcnic83xxaddrings, the indirect function ahw-hwops-allocmbxargs is called to allocate memory for cmd.req.arg. A dereference of this variable...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before 5.11.3 when a webcam device is present. The videousercopy function in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, identified as CID-fb18802a338b...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Fixed a divide-by-zero bug in arksetpixclock Since the user can control the arguments of the ioctl function from the user space, there are special cases where a divide-by-zero bug may occur. For example, in:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Softwarenodegetreferenceargs: A OOB check was corrected. Softwarenodegetreferenceargs attempts to retrieve the @index-th element. The property value requires at least ‘index + 1 sizeofref’ bytes. However, this requirement cannot ...

CVE-2018-6789-Python3

CVE-2018-6789 Exim 4.90.1 RCE Vulnerability Exim 4.90.1 RCE Vulnerability remake for Python3 with arguments passed from CLI Usage: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...

CVE-2024-28085

Wall-Escape CVE-2024-28085 Команда wall из util-linux не фильтрует escape-последовательности в аргументах командной строки. Уязвимый код был добавлен в коммите cdd3cc7fa4 2013. Все версии с тех пор уязвимы. Полный отчёт можно найти здесь. Я назвал этот баг «WallEscape». Этот код эксплойта успешно...

CVE-2021-4034-POC

CREDITS VULNERABILITY AUTHOR: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Reference https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...

CVE-2023-3079

Exploit for CVE-2023-3079 Shoutout to @clem1 for finding the ITW exploit. Shoutout to @alisaesage for her prior RCA on the bug. Shoutout to @buptsb for his notes on the bug. Resources Writeups and other resources. https://issues.chromium.org/issues/40065138...

log4j-log4shell-playground

About A playground for poking at the critical log4j aka Log4Shell CVE-2021-44228 vulnerability mitigations. This particular problem lies within the JndiLookup feature and the log4j ability to interpret ALL the arguments of a logging call. I would expect it to only interpret the format message the...