shellme

shellme Because sometimes you just need shellcode and opcodes quickly. This essentially just wraps some nasm/objdump calls into a neat script. root@kitploit: bryan@devbox:/shellme$ python shellme.py usage: shellme.py -h -n FILE -o OUTPUT -i INSTRUCTION -a ARCH optional arguments: -h, --help show...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

CVE-2026-63223-POC

CVE-2026-63223 PoC — CodeIgniter 4 ファイルアップロード RCE CVSS 9.8 緊急 | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : 危険なタイプのファイルの無制限アップロード 修正済み : CodeIgniter 4 v4.7.4 セキュリティ勧告 : GHSA-mmj4-63m4-r6h5 脆弱性の概要 CodeIgniter 4 の isimage および mimein ファイルアップロード検証ルールは、コンテンツから導出される MIME タイプ...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Версия: 0.4 Bytes Revealer — это мощный инструмент для реверс-инжиниринга и анализа бинарных файлов, предназначенный для исследователей безопасности, специалистов по криминалистике и разработчиков. Благодаря таким функция...

CVE-2026-89515 scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsiallocsgtables During fuzz testing, the following issue was discovered: BUG: KMSAN: uninit-value in dmamapsgattrs+0x217/0x310 dmamapsgattrs+0x217/0x310 dmamapsgattrs+0x4a/0x70...

EUVD-2026-75947

In PCRE2 before 10.48, pcre2serializeencode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe...

PT-2026-90481

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kernel old timeval contains a four-byte hole after tv usec because tv sec is 64-bit while kernel suseconds t is 32-bit. put itimerval fills...

CVE-2026-63223

CVE-2026-63223 — CodeIgniter 4 파일 업로드 RCE 매직 바이트 우회 → isimage/mimein → PHP 웹셸 → RCE 개요 CVE-2026-63223 은 PHP 풀스택 웹 프레임워크인 CodeIgniter 4 에서 발생하는 CVSS 9.8의 치명적Critical 심각도를 지닌 인증되지 않은 원격 코드 실행 취약점으로, 4.7.4 이전 버전 에 영향을 미칩니다. 이 취약점은 클라이언트가 제공한 파일명 확장자를 검증하지 않고 콘텐츠에서 파생된 MIME 유형매직 바이트만 검사하는 isimage 및...

CVE-2026-31431

copyfun 간단한 CVE 2026-31431 익스플로잇 데모 copyfun은 지정된 대상 파일의 캐시를 제공된 페이로드 바이트로 오염시킵니다...

openSUSE 16 Security Update : supergfxctl (openSUSE-SU-2026:21794-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21794-1 advisory. Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' CVE-2026-25541 boo1274336 - Update to version 1762634235.5d503b1: Added...

mongodb: Reject "." and NUL bytes in database and collection names

Impact Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified. Patches Fixed in PHP library 1.21.4 and 2.4.1. Workarounds Validate database and collection names prior to passing into APIs...

EUVD-2026-71281

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80761 Bluetooth: ISO: zero the sockaddr before returning it in getname

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname isosockgetname fills a struct sockaddriso in place and returns its size without clearing it first, so bytes it does not write are copied to user space from the kern...

EUVD-2026-68894

pypdf: Inefficient handling of non-whitespace inputs in readuntilwhitespace...

PT-2026-84883

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui agents/s1/utils/ocr server.py of the component OCR HTTP API. Executing a manipulation of the argument img bytes can lead to resource consumption. The attack m...

CVE-2026-82398

A flaw was found in pypdf. An attacker can craft a PDF that causes long runtimes when the readuntilwhitespace function processes a stream containing a long sequence of bytes without whitespace. This occurs due to inefficient algorithmic complexity, where the function repeatedly performs immutable...

CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

UBUNTU-CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...