CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 bit Scarica questa versione : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe Bypass ASLR, DEP Non bypassa CFG Analisi Blog del Team Blog del Membro del Team - mntly Adobe root cause.p...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Benutzerdefinierter Exploit : Foxit Reader Version 9.0.1.1049 Use After Free mit ASLR- und DEP-Umgehung auf dem Heap Mein benutzerdefinierter Exploit : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Benutzerdefinierter Exploit für Win 7 Hat Platz für Shellcode...

CVE-2009-0182

VUPlayer 2.49 Local Buffer Overflow per Esecuzione di Codice Arbitrario Versione del programma: VUPlayer 2.49 Vulnerabilità: local buffer overflow durante l'importazione di un file playlist .wax che porta all'esecuzione di codice arbitrario Sfruttamento: Local Buffer Overflow CVE: CVE-2009-0182...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass Meine Version - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

-CVE-2018-0834-aab-aar

Shoutout an @reubensammut, du bist ein Tier. CVE-2018-0834 vollständige Codeausführung. Enthält statische Offsets, umgeht cfg,dep,aslr : viel Spaß...

Overflow-Demo-CVE-2017-11882

Overflow-Demo-CVE-2017-11882 Demonstração simples de Overflow usando a string de texto strcpy, como no exploit CVE-2017-11882 Compilação Compile com Visual Studio 2017 2019 também funciona, 2015 não funciona. Configuração do Projeto root@kitploit: Project setting: c/c++ Optimization Optimization:...

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass A minha versão - CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass no Win7 x64 CVE-2018-6892...

CVE-2018-14442

Use After Free in CPDFParser::mpCryptoHandler di Foxit Reader 1. Contesto del Formato PDF 2. Dizionari di Crittografia 3. Dettagli della Vulnerabilità 4. Bypass di ASLR e DEP 5. Dettagli dell'Ambiente 6. Trigger 7. Autore Contesto del Formato PDF Il PDF è un formato di file utilizzato per...

rev-dep

Rev-dep Funzionalità • Installazione • Documentazione • Toolkit esplorativo • Riferimento CLI Kit di analisi e ottimizzazione delle dipendenze per codebase JavaScript e TypeScript moderni. Applica l'igiene del grafo delle dipendenze e rimuovi il codice inutilizzato con una CLI molto veloce...

PESTO

PESTO: Strumento Statistico per file PE Descrizione PESTO è uno script Python che estrae e salva in un database alcune caratteristiche di sicurezza o flag dei file PE, cercando in ogni binario PE in un'intera directory e salvando i risultati in un database. Controlla il flag di architettura...

dep-scan

Einführung OWASP dep-scan ist ein modernes Sicherheits- und Risikoprüfungstool, das auf bekannten Schwachstellen, Sicherheitshinweisen und Lizenzbeschränkungen für Projektabhängigkeiten basiert. Sowohl lokale Repositorys als auch Container-Images werden als Eingabe unterstützt, und das Tool eigne...

ASLRay

ASLRay Exploit Linux ELF x32/x64 con bypass di ASLR e DEP/NX tramite stack-spraying Proprietà: Bypass di ASLR Bypass di DEP/NX Multipiattaforma Minimalista Semplicità Non correggibile Dipendenze: Linux 2.6.12+ - funziona su qualsiasi sistema operativo Linux basato su x86-64 BASH - l'intero script...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' mia versione, bypass 'DEP' mia versione su di esso Testato su Win 7 Ultimate x86...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

MAL-2026-11431 Malicious code in @0xlr/dep-confusion-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15016319bdfd6f98a13cf4dcca7adad8ad4a97678bfaa77e2cb9b7068be0a435 Self-described dependency-confusion proof-of-concept targeting the @gojek/argus internal scope name. The package's postinstall hook only runs echo...

CVE-2026-48891

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

PT-2026-56177

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.0 Description A bug in the /ui/dependencies scheduling graph endpoint allows an authenticated UI user with read permissions on some Dags to enumerate identifiers of other Dags they are not authorized to rea...

@alenon/grpc-mock-server (>=3.1.21, <=3.2.3), @aliceo2/bookkeeping (>=1.8.0, <=1.12.0) +153 more potentially affected by CVE-2026-48068 via @grpc/grpc-js (>=1.13.0, <=1.13.4)

@grpc/grpc-js NPM version =1.13.0, =3.1.21, =1.8.0, =1.76.0, =1.0.0, =2.0.1, =1.0.7, =2.0.0, =1.1.37, =12.3.0, =0.3.1, =0.3.1, =0.3.8 and more Source cves: CVE-2026-48068 Source advisory: SNYK:JS-GRPCGRPCJS-17315646...

MAL-2026-5349 Malicious code in @demica/core (npm)

Dep-confusion squat of internal @demica/core at sentinel high version 99.99.100 + auto-exec postinstall canary.js beaconing to RAW IP 157.230.17.236:80/dc. Sentinel-high-version + auto-exec beacon = MALICIOUS per operator policy c913; "authorized benign canary" framing does NOT downgrade, raw-IP...

CVE-2026-46305

A flaw was found in the Linux kernel, specifically within the rtl8723bs staging driver's osdep module. The rtwcbufalloc function does not properly validate the return value of a memory allocation, leading to an unconditional dereference of a potentially NULL pointer. This vulnerability could allo...