CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2026-31431-live-code-corruption

CVE-2026-31431 — Corrupción de Código en Vivo mediante Caché de Páginas Una técnica de explotación novedosa para CVE-2026-31431 "Copy Fail" que corrompe el código ejecutable de procesos en ejecución a través de la caché de páginas del kernel de Linux, logrando escalada de privilegios a root. Qué ...

ai-agent-security-research

Investigación de Seguridad de Agentes de IA Investigación de seguridad de código abierto sobre la infraestructura de agentes de codificación de IA. Publicado por Hodge Luke Digital Intelligence Agency Qué es esto Este repositorio contiene investigación de seguridad, análisis de vulnerabilidades y...

zeek-elf

Zeek ELF 包 该包实现了： ELF 太长不看！ 如果你已经安装了 zkg，并且已经运行过... zkg autoconfig ...那么你可以像这样安装该包： sudo zkg install zeek-elf 现在，在任何 Zeek 脚本中，只需加载该插件，它就能“直接工作”： @load Zeek/ELF 该插件的新事件可在 events.bif 中找到。 构建与安装 该插件可以通过以下方式构建： ./configure --zeek-dist=/your/zeek/src/dir make sudo make install 使用 ELF 测试用 pcap 文件：...

MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! 此漏洞已被 Primefort Private Limited 的 Sudhakar Muthumani、Khiem Tran 同时发现或持有，并列为 CVE-2022-22600。尽管我在 2021 年就已经通过电子邮件向 Apple 报告了此事。 受影响版本 作为一名学生，我能用于测试此漏洞的设备有限。目前我测试过的版本为 MacOS 12.1、MacOS 12.0 和 MacOS 11.6.1。 POC 文件位于 POC 目录中。只需运行 POC.sh，即可在无 TCC 提示的情况下生成屏幕截图。 那么这个 bug 是什么...

check_38077

文件名称: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

vmware_exploit_pack_CVE-2009-1244

vmwareexploitpackCVE-2009-1244 vmware cloudburst 漏洞利用 CVE-2009-1244 hackto 位于 .exe 中 - 视频在此：https://vimeo.com/6595412...

CVE-2025-57392

CVE-2025-57392 🔒 安全漏洞报告 产品：BenimPOS Desktop V3.0 漏洞类型：不安全的文件权限 受影响组件：BenimPOS.exe, unins000.exe, System.Data.SQLite.dll 漏洞分类：CWE-276：不正确的默认权限 概念验证作者：Fatih Bülbül 测试环境：Windows 11 x64 – 本地管理员 + 标准用户 🛠️ 1. 漏洞检测 首先，我使用 Sysinternals 开发的 AccessChk.exe 工具检查了 BenimPOS 应用程序安装目录的权限： 使用的命令： accesschk.exe...

CVE-2026-106102

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

EUVD-2026-93419

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the runshell tool in the CommandLineExecutor component of ufo/client/mcp/localservers/climcpserver.py validates only the first token of the bashcommand parameter and permits...

rats-re

Reconstrucción del código fuente de Rats! con LLM locales Este repositorio es una reconstrucción en curso del código fuente de RATS.EXE, la versión original para Windows de Rats! 1994 de Sean O'Connor. Compila un ejecutable Win32 con Microsoft Visual C++ 4.1 bajo wibo y puede probarse en DREAMM. ...

PT-2026-106748

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run shell tool in the CommandLineExecutor component of ufo/client/mcp/local servers/cli mcp server.py validates only the first token of the bash command parameter and permits...

Astra Linux – Vulnerability in binutils

The bfdgenericreadminisymbols function in syms.c within the Binary File Descriptor BFD library also known as libbfd, as part of GNU Binutils 2.31, contains a memory leak that can occur due to an improperly crafted ELF file. This leads to a denial of service condition due to excessive memory...

Astra Linux – Vulnerability in Firefox

An attacker who could have convinced a user to drag and drop an image into a file system could have manipulated the resulting filename to include an executable extension. By doing so, the attacker could potentially trick the user into executing malicious code. Although very similar, this is a...

Astra Linux – Vulnerability in Firefox

An attacker who could have convinced a user to drag and drop an image into a file system could have manipulated the resulting filename to include an executable extension. By doing so, the attacker could potentially trick the user into executing malicious code. Although very similar, this is a...

CVE-2024-39929

CVE-2024-39929 PoC 漏洞简述 Exim 至 4.97.1 版本错误解析了多行 RFC 2231 头文件名，因此远程攻击者可以绕过 $mimefilename 扩展名阻止保护机制，并可能将可执行附件投递到最终用户的邮箱中。 此检测方法如何工作？ 至 4.97.1 版本均受此漏洞影响。此模板版本匹配所有早于或等于 4.87.1 的 Exim 实例。 如何运行此脚本？ 1. 从 此处 下载 Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考...

CVE-2026-105293: Improper Limitation of a Pathname to a Restricted Directory

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

vulnerability-url

vulnerability-url 警告！仅供测试和教育使用！ https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

collisions

Colisiones de hash y explotaciones Por Ange Albertini y Marc Stevens. FAQ TL;DR P: ¿Es posible hacer que un archivo obtenga un MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3 arbitrario, o el mismo hash que otro archivo? R: No. P: ¿Se pueden crear 2 archivos diferentes con el mismo hash? R: Con MD5, en unos...

ida-efiutils

EFI scripts for IDA Pro Some IDA scripts to assist with reverse engineering EFI executables. This package contains the following files: 1. efiutils.py - IDAPython module with some helper functions 2. efiguids.py - A collection of known GUIDs for EFI protocols 3. efiguidsami.py - A collection of...