DInvoke

DInvoke Substituição dinâmica para PInvoke no Windows. O DInvoke contém primitivas poderosas que podem ser combinadas de forma inteligente para invocar dinamicamente código não gerenciado a partir do disco ou da memória com precisão cuidadosa. Isso pode ser usado para muitos propósitos, como...

ssl-kill-switch3

SSL Kill Switch 3 iOS Tweak SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 की अगली पीढ़ी, जिसमें और भी बहुत सारी कार्यक्षमताएँ हैं! नया क्या है? FIXED Fishhook समर्थन iOS 15+, ARM64/ARM64e, ताकि आप नॉन-जेलब्रेक युग में भी हुक कर सकें FIXED रूटलेस समर्थन iOS 15+, ARM64/ARM64e, हैप्पी...

HeapCrypt

HeapCrypt Crittografare l'Heap durante il sonno intercettando e modificando Sleep con una nostra funzione che crittografa l'heap, dorme per un momento e poi decrittografa l'heap: Crittografia xor dell'heap con chiave a 16 bit : Decrittografia xor dell'heap con chiave a 16 bit : Riferimenti :...

linux-malware-detect

Linux Malware Detect LMD Scanner di malware per Linux — rilevamento delle minacce multi-stadio MD5, SHA-256, HEX, YARA, analisi statistica, integrazione con ClamAV, monitoraggio in tempo reale tramite inotify, operazioni di quarantena/pulizia/ripristino e alerting multi-canale email, Slack,...

DInvoke_rs

DInvokers Rust-Port von Dinvoke. DInvokers kann für viele Zwecke verwendet werden, beispielsweise für das Parsen von PE-Dateien, die dynamische Auflösung exportierter Funktionen, das dynamische Laden von PE-Plugins zur Laufzeit, die Umgehung von API-Hooks und mehr. Features: Undokumentierte...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

WindowsFirewallHookDriverEnumeration

Enumerazione dei driver hook del firewall di Windows Strumenti per enumerare i driver hook del firewall di Windows su Windows 2000, XP e 2003. Abbiamo visto un campione di codice malevolo che utilizza questa tecnica. La tecnica di hooking La funzionalità Windows Firewall Hook nella tecnica XP/200...

git_rce

CVE-2024-32002 PoC 1. Devi configurare l'opzione dei link simbolici di git in questo modo: root@kitploit: git config --global core.symlinks true 2. Quindi sfrutta CVE-2024-32002 con il seguente comando: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Scenario di...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2026-55090

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090 Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090 Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

EUVD-2026-62734

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090

Etherpad (real-time collaborative editor) versions prior to 3.3.0 are vulnerable to stored cross-site scripting in the HTML export feature. The root cause is in getHTMLFromAtext in src/node/utils/ExportHtml.ts, which interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into s...