galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

CVE-2023-38831-PoC

CVE-2023-38831 PoC 本仓库仅用于CVE-2023-38831 WinRAR零日漏洞的概念验证 RARLabs WinRAR 6.23之前版本允许攻击者在用户尝试查看ZIP存档中的良性文件时执行任意代码。问题在于ZIP存档可能同时包含一个良性文件（如普通.JPG文件）和一个与该良性文件同名的文件夹，当用户仅访问良性文件时，该文件夹的内容（可能包含可执行文件）会被处理。该漏洞于2023年4月至8月期间在野外被利用 使用方法 Usage: - poc.py -h scriptPath benignPath zipDirectory fname CVE-2023-38831...

CVE-2017-8759-exploits

CVE-2017-8759-exploits CVE-2017-8759 漏洞利用的两个版本 示例 1 - 从远程位置下载 .Net dll（不接触磁盘），加载并执行 示例 2 - 加载嵌入式 .Net dll 并执行...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

XCP_ng_CVE-2026-43284_tester

Diagnóstico de Dirty Frag para XCP-ng — CVE-2026-43284 Una herramienta de diagnóstico comunitaria para determinar si un host dom0 de XCP-ng está expuesto a CVE-2026-43284 "Dirty Frag", una vulnerabilidad de escalada de privilegios local en el subsistema xfrm-ESP del kernel de Linux. TL;DR — Todas...

CVE-2023-28252

CVE-2023-28252 关于Windows漏洞CVE-2023-28252学习的简要总结 这个周末我在Hack The Box上练习Aero机器。当你能够模拟对Windows 11机器的真实攻击时，这台机器玩起来非常有趣。完成之后，我很好奇并想知道权限提升漏洞是如何工作的。于是我主要阅读了漏洞作者撰写的文章1。描述非常详细，解释得很清楚。但通读整个过程需要很多时间。为了更好地展示漏洞利用工作流程，我想在此将过程可视化。向漏洞作者Ricardo narvaja和Esteban kazimirow以及来自奇安信的作者2致以崇高的敬意。 1...

AlanFramework

Alan 框架 Alan Framework 是一个在红队活动中有用的后渗透框架。 如果你觉得我的工具有用，请考虑赞助我。 ⚠⚠⚠ 免责声明 ⚠⚠⚠ 此类软件的创建一直引发争议。如果你想知道我为什么决定创建这个工具，那是因为我相信最终的学习体验是实现你所学的知识。在逆向工程过程中，许多小细节被忽略。渐渐地，这些细节阻碍了研究人员全面了解正在发生的事情。最后，我首先是一名程序员，我喜欢开发这类程序 😄 下载 下载 Alan C2 框架 显著特点 你可以直接在内存中运行你喜欢的工具 JavaScript 脚本执行（内存中，无需第三方依赖） 完全兼容的 SOCKS5 代理...

OESA-2026-4137 jss security update

Java Security Services JSS is a java native interface which provides a bridge for java-based applications to use native Network Security Services NSS. This only works with gcj. Other JREs require that JCE providers be signed. Security Fixes: A flaw was found in JSS Java Security Services. The...

CVE-2026-96825

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CVE-2026-96825

The All In One WP Security & Firewall WordPress plugin, in versions

CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

EUVD-2026-89878

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CVE-2022-47986

CVE-2022-47986 为什么 该漏洞已在野外被利用。 IceFire 利用此漏洞在目标系统上部署勒索软件，我希望帮助 SOC/蓝队识别受影响系统，帮助渗透测试/红队利用并报告漏洞。 描述 我提供了纯 Python 和 Ruby 脚本、Metasploit 和 Nmap 模块，用于利用 IBM Aspera Faspex 中因 YAML 反序列化导致的 RCE（远程代码执行）漏洞。 利用：RCE（远程代码执行） Python python3 CVE-2022-47986.py OR chmod u+x CVE-2022-47986.py ./CVE-2022-47986.py...

CVE-2026-10764

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

EUVD-2026-89756

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-10764

The BVMS software (versions 4.5 up to 12.3 ) is susceptible to an information disclosure vulnerability. This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data . The vulnerability is characterized by a high CVSS 3.1 base score of 8.7 , reflecting significant imp...

CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-97989

A flaw was found in the Linux kernel's vDPA Device in Userspace VDUSE subsystem. The driver does not properly validate virtqueue alignment parameters during device configuration, allowing invalid or zero alignment values to pass into internal queue creation routines. A local user could exploit th...