rufus

Rufus：可靠的 USB 格式化工具 ========================================== Rufus 是一款帮助格式化并创建可启动 USB 闪存驱动器的实用工具。 功能 将 USB、闪存卡和虚拟驱动器格式化为 FAT/FAT32/NTFS/UDF/exFAT/ReFS/ext2/ext3 使用 FreeDOS 或 MS-DOS 创建 DOS 可启动 USB 驱动器 创建 BIOS 或 UEFI 可启动驱动器，包括 UEFI 可启动 NTFS 从可启动 ISO（Windows、Linux 等）创建可启动驱动器 从可启动磁盘映像（包括压缩映像）创建可启动驱...

CVE-2021-30809-OOM

CVE-2021-30809 — Apple WebKit 释放后重用漏洞（崩溃 PoC） https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 概述 本仓库包含一个针对 CVE-2021-30809（WebKit 释放后重用漏洞）的极简崩溃触发框架。PoC 通过处理精心构造的 Web 内容来利用漏洞代码路径，旨在可靠地触发浏览器崩溃（非完整利用）。它严格用于研究、调试和回归测试。 目标引擎：WebKit（例如 WebKitGTK / WPE WebKit，内嵌于设备中的旧版本分支）...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2019-17427

CVE-2019-17427 CVE-2019-17427 持久性 XSS 验证概念 在 Redmine 3.4.11 之前版本以及 4.0.x 中早于 4.0.4 的版本中，由于纺织标记格式化错误，存在持久性 XSS 漏洞。 该漏洞本质上存在于任何默认使用纺织标记格式的 wiki 页面中。你可以通过使用 pre 参数来利用它。 pre onfocusin=alert"pwnd" tabindex=1 style="height:500px;width:500px;" class= 要充分利用此漏洞，你可以链式使用 poc.txt（其中包含 XSS 示例有效载荷）来启用 API，从而实现...

copy-as-yara

Copy as YARA Autor: alden Copia el desensamblado con un formato adecuado para reglas de YARA. Descripción: Este es un plugin muy sencillo que te permite copiar el desensamblado de una manera que puede usarse en reglas de YARA. Tienes la opción de copiar el código ensamblador tal cual o usar...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 已将 CVE-2025-48060（jvstringempty 中的堆缓冲区溢出）的上游修复反向移植到 jq 1.6。 反向移植（CVE-2025-48060）—— 将上游提交 c6e0416（“修复格式化空字符串时的堆缓冲区溢出”）从较新的 jq 版本反向移植到 jq-1.6，调整了内部字符串表示（jvstringempty），添加了回归测试（0implode），并成功重新构建和运行了测试套件。 如何应用此补丁 你可以在官方 jq-1.6 版本之上应用此反向移植，既可以基于 tarball，也可以基于 git checkou...

EUVD-2026-68295

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

CVE-2026-82592

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: The reference to the devm device for the hidinput inputdevice name needs to be corrected. Instead of referring to the input device, the correct device should be used for the devm allocation of the inputdevice name...

Astra Linux – Vulnerability in Jinja2

This issue affects the Jinja2 package versions starting from 0.0.0 and earlier than 2.11.3. The ReDoS vulnerability is primarily caused by the punctuationre regex operator and its use of multiple wildcards. The last wildcard is the most exploitable, as it is used to search for trailing punctuatio...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...

DEBIAN-CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in its dictionary string-formatting function. The root cause is that a pointer to a stack-local buffer is stored in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, this allows ...

CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220 PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220 PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

Uncaught Exception

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncaught Exception via the comment formatting. An attacker can cause affected cases to become inaccessible to all users by...

CVE-2026-72720

CVE-2026-72720 affects the Discourse open‑source forum platform. The issue is an HTML injection vulnerability in PrettyText.format_for_email where cooked attribute values are reparsed as markup, enabling decoded attribute text from crafted Vimeo iframe sources, secure-upload URLs or dimensions, a...

PT-2026-69860

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.7 Discourse versions prior to 2026.6.2 Discourse versions prior to 2026.7.1 Discourse versions prior to 2026.8.0-latest.1 Description An HTML injection issue exists in the PrettyText.format for email function...