Anti_suspend

Antisuspend 仅是一个使用 shellcode 保护进程的示例。 防止： 1冻结进程线程（可以对调试器使用 anti-attach） 2硬件断点 3对调试器隐藏线程 问题： 在非合法模块中使用代码 这将引发 AV 的警报标志...

CVE-2024-27914

CVE-2024-27914: GLPIのデバッグモードにおける反射型XSS 認証されていないユーザーは、反射型XSSの脆弱性を悪用するために、GLPI管理者に悪意のあるリンクを提供することができます。このXSSは、管理者がデバッグバーを操作した場合にのみ発動します。 パッケージ - GLPI https://github.com/glpi-project/glpi 影響を受けるバージョン - = 10.0.8 パッチ適用済みバージョン - 10.0.13 PoC -...

WTSRM2

WTSRM2 这是我原始项目 WTSRM 以及相应演讲的延续。 该项目被重写是为了利用 C++17 来创建一个模板，使我们能够在编译时轻松更改所需的功能！它实现为仅头文件（header-only），这样你就可以轻松地将其添加到自己的项目中。 目前已实现的一些功能包括： 无 CRT 依赖（10KB 二进制） 使用 \KnownDlls\ 或 \System32\ 通过 '.text' 补丁来解除所有 Windows DLL 的钩子 使用 VirtualProtect 或 WriteProcessMemory 进行补丁 编译时 API 哈希 移除并恢复 Vectored Exception...

CVE-2025-34171

CVE-2025-34171：CasaOS 中未经身份验证的文件与调试数据暴露 漏洞概述 字段| 值 ---|--- CVE 编号| CVE-2025-34171 影响版本| CasaOS ≤ 0.4.15 修复版本| 无可用补丁 严重性| 中危 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-862：缺少授权，CWE-497：向未经授权的控制范围暴露敏感系统信息 执行摘要 CasaOS 0.4.15 及更早版本包含多个未经身份验证的 API...

CVE-2023-42793-TeamCity-Unauthenticated-RCE

CVE-2023-42793 - JetBrains TeamCity 安全评估工具 本仓库提供了一个基于 Python 的实用工具，旨在评估和演示 CVE-2023-42793 的安全影响，这是一个影响本地部署的 JetBrains TeamCity 服务器的严重漏洞。 漏洞详情 CVE 标识符： CVE-2023-42793 CVSSv3 评分： 9.8（严重） 漏洞类型： 身份验证绕过 / 远程代码执行（RCE） 受影响版本： 2023.05.4 之前的 JetBrains TeamCity 修复版本： 2023.05.4 及后续版本 技术摘要 该漏洞存在于 TeamCity We...

Linux Distros Unpatched Vulnerability : CVE-2026-89497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, , but then...

hwbp4mw

本文最初是为 VX-Underground Black Mass Halloween Edition 2022 撰写的。 Hook 引擎： 多线程安全的 x86/x64 硬件断点 Hook 引擎 C PAGEGUARD/hwbp 断点库 C++20 hwbp 库（DLL 示例）C++20 利用调试寄存器实现的通用 x64 用户态规避技术： TamperingSyscalls2 C TamperingSyscalls2 C++20 可用的 ETW/AMSI Hook 示例 rad9800/misc 恶意软件硬件断点 v 1.0 我们的任务是轻松地 Hook...

DEBIAN-CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

AZL-100181 CVE-2026-89497 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

UBUNTU-CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

EUVD-2026-76403

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497 orangefs: skip leading spaces before parsing client debug masks

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION 剧透警告。 这是一份包含 flag 的完整通关攻略。如果你想自行攻克这台机器，请立即关闭本文，卡住时再回来。 机器信息 字段| 详情 ---|--- 名称| Reactor 操作系统| Ubuntu 24.04 LTS Noble 难度| 中等 CVE| CVE-2025-55182 CVSS 10.0 端口| 22 SSH, 3000 Next.js 作者| sonnycroco 概述 Reactor 的主题是一个名为 ReactorWatch 的核电站监控仪表盘。这台机器完全围绕两个串联起来的漏洞展开——没有猜测，没有误导分支，没有暴力破解...

CVE-2026-19985

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

EUVD-2026-75937

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2026-19985 Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2026-19985

Relevanssi – A Better Search (WordPress plugin) versions up to and including 4.28.1 are vulnerable to Reflected Cross-Site Scripting via the s, post_types, and orderby request parameters. The root cause is insufficient input sanitization and output escaping in the relevanssi_debug_array() functio...

CVE-2026-42805

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI C library within the debug message parser function bhi385parsedebugmessage located in bhi385parse.c. The function parses FIFO events and extracts an 8-bit message length directly from the attacker-controlle...