npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

CVE-2024-6782

CVE-2024-6782 Calibre 远程代码执行（CVE-2024-6782）Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

The vulnerability of the Aquarius L311 device driver for the Autora operating system, related to access control errors, allows a perpetrator to gain access to protected information and affect the system.

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

The vulnerability of the Shtab project and task management service, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the software for centralized printer and MFP supervision, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

ICSSecurityScripts

ICSSecurityScripts Scripts de Seguridad Industrial Beckhoff-CX9020-WebControl.py: Control del PLC Beckhoff CX9020 con Windows CE FullBeckhoffScan.py: Script elaborado para escanear Y hackear PLCs de Beckhoff PhoenixControlPLC-ILC150.py: Imprime el estado de la CPU y lo revierte, probado y...

khaos-c2

KHAØS C2 KHAØS 是一个现代化的后渗透 C2 框架，内置5种隐蔽通道和全面规避功能，由 @28Zaaky 创建。 查看文档获取完整说明。 为什么选择KHAØS 大多数开源C2有一个共同点：它们早已存在于所有EDR厂商的数据库中。KHAØS从一开始就考虑到这一点而构建。 代理端采用C语言编写。它使用间接系统调用，从磁盘的干净副本中取消挂钩ntdll，通过硬件断点（而非字节修补）修补ETW和AMSI，并在休眠期间混淆其堆栈。每次构建都会重新生成字符串编码密钥和凭据XOR值，因此两个基于相同配置编译的二进制文件永远不会共享静态签名。 在网络侧有五种通道：Microsoft...

nextjs-middleware-bypass-demo

CVE-2025-29927 演示 原文分析文章：https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware 设置 首先，运行开发服务器： npm i npm run dev 用浏览器打开 http://localhost:3000 查看结果。 尝试绕过 curl -I http://localhost:3000 HTTP/1.1 307 Temporary Redirect location: /403 Date: Mon, 24 Mar 2025 08:02:50 GMT...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

minicps

MiniCPS MiniCPS es un framework para la simulación en tiempo real de sistemas ciberfísicos. Incluye soporte para la simulación de procesos físicos y dispositivos de control, así como emulación de red. Está construido sobre mininet. MiniCPS es desarrollado por el grupo SCy-Phy de SUTD Universidad ...

piraterf

gosmopolitan English 用 gosmopolitan 检查你的 Go 代码库里有没有国际化（“i18n“）或者本地化（”l10n“）的阻碍。 项目名字来自“cosmopolitan”的文字游戏。 检查 gosmopolitan 目前会检查以下的反模式（anti-patterns）： 含有来自特定书写系统字符的字符串字面量（string literals）。 项目中存在这种字符串，通常意味着相关的逻辑不便于国际化，或者至少在国际化/本地化适配过程中会涉及特殊对待。 time.Local 的使用。...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

CVE-2020-10239

作者：HK CVE-2020-10239：comfields SQL字段中的不正确的访问控制 - 远程代码执行 PoC 受影响版本：Joomla核心 3.7.0 至 3.9.15 用户要求：管理员账户（后端最低权限） 获取权限：将您从管理员提升为超级管理员，然后触发远程代码执行。 Joomla中的远程代码执行（RCE） 使用您的凭据运行 cve202010239.py 并访问远程代码执行链接：...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control es una herramienta que permite a los Red Teams desarrollar y utilizar rápidamente canales de comando y control C2 esotéricos. Es un framework que extiende otras herramientas de red team,...