norimaci

Norimaci 「Norimaci」は、macOS向けのシンプルで軽量なマルウェア解析サンドボックスです。このツールは「Noriben」に触発されて作成されました。Norimaciは、Sysinternals Process Monitor procmon の代わりに、OpenBSMまたはMonitor.appの機能を使用してmacOSのシステムアクティビティを監視します。 Norimaciは3つのPythonスクリプトで構成されています。 norimaci.py : メインスクリプト openbsmconv.py : OpenBSM監査ログ変換ツール monitorappconv.p...

CVE-2024-11392

CVE-2024-11392 Hugging Face Transformers MobileViTV2 における信頼できないデータのデシリアライゼーションによるリモートコード実行の脆弱性 脆弱性の概要と影響: この脆弱性により、攻撃者は悪意のある設定ファイルをHugging Face Transformersリポジトリの convertmlcvnetstopytorch.py スクリプトに提供することで、ホストマシン上で任意のコードを実行できます。 見知らぬユーザーが悪意のある設定ファイルを伴うサードパーティモデルを使用し、convertmlcvnetstopytorch.py...

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

shellex

shellex 警告 : 世界で最も醜いコード Cシェルコードから16進数へのコンバーター。 寄付をご検討ください: https://github.com/sponsors/therealdreg IDA PRO、gdb、windbg、radare2、ollydbg、x64dbg、immunity debugger、010 editorでシェルコードをペースト＆実行するための便利なツール。 Cシェルコードを16進数に変換するのに問題がありますか？（Cコメント＋ASCII混合など？）...

CVE-2009-1330

CVE-2009-1330 针对 Easy RM to MP3 Converter 2.7.3.700 缓冲区溢出的利用 CVE-2009-1330 基于： pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 存在漏洞的应用程序下载地址：https://www.exploit-db.com/exploits/10374...

Exe2Image

Exe2Image 一个简单的工具，用于将EXE文件转换为PNG图像，反之亦然。 下载： https://github.com/OsandaMalith/Exe2Image/releases 截图 将Putty.exe转换为图像。...

CVE-2017-8367

CVE-2017-8367 针对漏洞 CVE-2017-8367 Easy Mov Converter 注册功能的基于栈的缓冲区溢出 PoC 漏洞利用程序。 用法 运行脚本后，将生成包含有效载荷的 POCPayload.txt 文件。 root@kitploit: python3 payloadgeneratorCVE-2017-15950.py 在记事本中打开输出文件，将 ASCII 输出复制到 Easy Mov Converter 注册功能的用户名字段中。...

PowerShell-for-Hackers

Hacker Hak5 dell'anno 2022 Indice 1. Descrizione 2. Le Funzioni 3. Contatti 4. Riconoscimenti Funzioni PowerShell per Hacker 🤓💻 Attualmente sono il contributore di payload numero 1 per Hak5. Ho deciso di creare questo repository per condividere tutte le funzioni che ho ideato per sviluppare i mie...

CVE-2026-63632

A flaw was found in Open Neural Network Exchange ONNX. An out-of-bounds read can occur in the onnx.versionconverter.convertversion function when processing Gemm nodes with input tensors having fewer than two dimensions. This vulnerability, caused by a lack of rank checking, could allow an attacke...

pwnkit-exploit

pwnkit CVE-2021-4034 Esempio di exploit per l'escalation dei privilegi Questo repository contiene un exploit per CVE-2021-4034, un'escalation locale dei privilegi in pkexec. Questa implementazione si basa su quella descritta nella divulgazione della CVE, che dovreste leggere. Se funziona sulla...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: calling inputfreedevice on the allocated iiodev The current implementation of at91tsregister calls inputfreedevice on st-tsinput. However, the err label can be reached before the allocated iiodev is stored to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: Serialize concurrent physetmodeext calls to shared registers The protocol converter configuration registers PCC8, PCCC, and PCCD implemented by the driver control protocol converters across multiple lanes each...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/virtio: fixed a NULL pointer derefrence in virtiogpuconngetmodes drmcvtmode may return NULL, and we should check for this. This bug was discovered by syzkaller: FAULTINJECTION stacktrace: 168.567394 FAULTINJECTION: forcing...

NPM: gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

NPM: gettext-converter: Prototype pollution in js2i18next via crafted translation keys vulnerability discovered by ? in WordPress Npm gettext-converter versions 1.3.3...

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Impact js2i18next is vulnerable to prototype pollution. When converting translations, it splits nested keys on the key separator default and uses each segment as a dynamic object key while building the output object. A key whose segment is proto e.g. protogcPolluted causes the converter to resolv...

GHSA-F4JP-RW7W-CCWG gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Impact js2i18next is vulnerable to prototype pollution. When converting translations, it splits nested keys on the key separator default and uses each segment as a dynamic object key while building the output object. A key whose segment is proto e.g. protogcPolluted causes the converter to resolv...

CVE-2026-65842

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob in a server-side or privileged environment. The converter can make requests to internal network resources and include the...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the SerializingHttpMessageConverter process. An attacker can execute arbitrary code by sending a specially crafted HTTP request with the Content-Type set to application/x-java-serialized-object and a...

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution...