Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Este repositorio no tiene un README...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

CVE-2026-64705

CVE-2026-64705 — Desbordamiento de montón del kernel en xattr de HFS macOS Análisis de causa raíz y prueba de concepto para CVE-2026-64705, un desbordamiento de búfer en la extensión del kernel HFS corregido en macOS Sonoma 14.8.7 HT127117: HFS — Impacto: una app podría causar una terminación...

rejjeto_hfs-rce-exploit-cve-2014-6287

HFS 远程命令执行漏洞利用（CVE-2014-6287） 这是经典远程命令执行（RCE）漏洞利用程序的 Python 3 重写版本，目标为 Rejetto HTTP 文件服务器（HFS）v2.3.x ，利用了编号为 CVE-2014-6287 的漏洞。 该漏洞最初由 Avinash Kumar Thapa（又名“-Acid”） 发现，此版本提高了可移植性和易用性，提供了完全参数化和现代兼容性。 ⚠️ 免责声明 本工具仅用于教育和授权渗透测试 目的。未经授权对并非你拥有或未获明确许可的系统进行使用，是非法且不道德的。 📌 漏洞利用详情 漏洞： Rejetto HFS v2.3.x -...

CVE-2024-23692

CVE-2024-23692 Usage: go run hfs.go -h go run hfs.go -u http://127.0.0.1 go run hfs.go -u http://127.0.0.1 -dns //默认使用ceye.io需配置 go run hfs.go -u http://127.0.0.1 -dns -d abc.cn //指定dnslog go run hfs.go -u http://127.0.0.1 -cmd //进入命令行 Tips: DNSLOG检测默认使用ceye.io, 如需使用请配置config目录下config.ini配置文件...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Macos

CVE-2026-43682: an HFS+ B-tree kernel heap overflow in macOS...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

EUVD-2026-85880

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-001071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001071 advisory. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0...

Linux Distros Unpatched Vulnerability : CVE-2026-93095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: Verify the inode mode when loading from disk. syzbot reports that the SIFMT bits of the inode-imode field can become invalid when the SIFMT bits of the 16-bit “mode” field loaded from disk are corrupted. According to ...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: hfs: Fixed OOB write operations in hfsasc2mac. Syzbot reported a OOB write bug: loop0: A change in capacity was detected, from 0 to 64. =========================================== Bug: KASAN: Out-of-bounds access in...

Astra Linux – Vulnerability in grub2

GNU GRUB also known as GRUB2 from version 2.12 has a heap-based buffer overflow in the fs/hfs.c file, due to crafted sblock data within an HFS filesystem...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hfs: fixed the missing hfsbnodeget function in hfsbnodecreate. Syzbot discovered a kernel bug in hfsbnodeput: Kernel bug at fs/hfs/bnode.c:466! Invalid opcode: 0000 1 PREEMPT SMP KASAN CPU: 0 PID: 3634 Comm: kworker/u4:5 Not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053318 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

CVE-2026-80656

A flaw was found in the Linux kernel's hfsplus filesystem. A local attacker could provide a specially crafted and corrupted HFS+ image. When attempting to mount this image, a malformed btree node size value could lead to the use of an uninitialized value within the kernel. This could result in a...

CVE-2026-80656

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...

UBUNTU-CVE-2026-80656

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...