CVE-2016-2569

Bonjour, Merci de lire mon premier billet de blog. Aujourd'hui, nous allons créer un exploit pour l'un des outils open-source, le serveur proxy de cache Squid. Alors, qu'est-ce que Squido ? Squid est un proxy de cache pour le Web prenant en charge HTTP, HTTPS, FTP, etc. Il réduit la bande passant...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh Ce script vérifie CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. Le serveur SSH Dropbear antérieur à 2013.59 génère des messages d'erreur pour une tentative de connexion échouée avec des délais différents selon que le compte utilisateur existe ...

MinimalReproducer

Après des efforts considérables, je l'ai réduit à un réplicateur minimal. Ceci est juste un projet vide pour démontrer le problème posé par l'utilisation de dependency-check-maven, à laquelle les règles de mon entreprise m'obligent. Vérifiez bien le pom.xml et confirmez : mvn...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: حظر المضيفات التي تسبب أخطاء مصادقة متعددة يقوم Fail2Ban بمسح ملفات السجل مثل /var/log/auth.log وحظر عناوين IP التي تقوم بعدد كبير جدًا من محاولات تسجيل الدخول الفاشلة. يقوم بذلك عن طريق تحديث قواعد...

sdrtrunk

Utilisateurs de MacOS Tahoe 26.1 - Attention: Les modifications apportées au support USB dans Tahoe version 26.x empêchent sdrtrunk de démarrer. Suivez les instructions ci-dessous pour installer la dernière version de libusb, créer un lien symbolique, puis utiliser la version nightly qui inclut u...

CVE-2026-79006

A protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by sending crafted network traffic. The Chromium team rated the severity as Medium . Users should update to version 152.0.7977.65...

CVE-2026-31431-Analysis

CVE-2026-31431-Analyse Rapport d'Analyse Technique: Exploitation d'une Défaillance d'Isolation dans le noyau Linux CVE-2026-31431...

fcn-

fcn free connect your private network from anywhere 1. fcn이란 무엇인가 fcnfree connect은 누구나 간편하게 원클릭으로 사설망에 접속할 수 있는 도구로, 고객 서버와 클라이언트로 구성됩니다. fcn은 fcn 공용망 데이터 서버와 데이터 암호화 기술을 사용하여 사용자 클라이언트를 고객 서버 사설망에 가상으로 접속시킵니다. fcn = fcnserver + fcnclient 참고: FCN V3.0 이전 버전은 서버 전환 시 BUG가 있으며, FCN이 최근 서버 IP를 전환하여...

CVE-2023-23924

CVE-2023-23924 Dompdf vulnérable à une défaillance de validation d'URI lors de l'analyse SVG · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Exécution root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php...

CVE-2026-54920

A flaw was found in OpenEXR. A remote attacker could exploit a reachable assertion failure in the HTJ2K decode path by providing a specially crafted HTJ2K-compressed EXR file. This file, containing a QCD marker with specific invalid bits, causes an unconditional process abort in applications that...

CVE-2026-53532

A flaw was found in OpenEXR. A remote attacker can provide a specially crafted HTJ2K-compressed EXR file, which causes an unconditional process abort in applications that process untrusted input. This denial of service occurs because OpenEXR passes a malformed QCD marker to the vendored OpenJPH...

CVE-2026-47624

NVIDIA DGX Spark contains a CWE-693 (Protection Mechanism Bypass) vulnerability in its UEFI firmware. A privileged local user can exploit this flaw to bypass administrator password protection in the UEFI environment. The CVSS v3.1 score is 6.0 (MEDIUM) , reflecting a local attack vector, low comp...

EUVD-2026-65606

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...

AnonX

ВНИМАНИЕ Скрипт AnonX был основан на публичном API we-transfer и перестал работать через три недели после его выпуска. «Всё хорошее когда-нибудь заканчивается, поэтому с тяжёлым сердцем и сдерживая слёзы мы вынуждены объявить, что мы прекращаем поддержку нашего Публичного API. Грустные времена», ...

CVE-2026-74728

A flaw was found in the Linux kernel's XFS filesystem. When the system attempts to allocate memory for an XFS buffer and that allocation fails, the xfsbuffree function is called with a null buffer address. This leads to a null pointer dereference, causing the kernel to crash. This vulnerability c...

CVE-2020-8004

CVE-2020-8004 Test $cd openocd-toolbox/scripts/linux/stm32f1x/ $./lock.sh $./attach.sh $telnet localhost 4444 $reset halt $mdw 0x08000000 $cd stm32f1-firmware-extractor $python3 main.py 0x08000000 512 Références https://blog.zapb.de/stm32f1-exceptional-failure/...

CVE-2025-65945-poc

CVE-2025-65945: Contournement de la vérification de signature dans node-jws Ceci est une preuve de concept pour un contournement de la vérification de signature dans la bibliothèque node-jws. Ce bug permet aux attaquants de forger des JWTs valides lorsque le serveur dérive des secrets HMAC à part...