android_application_analyzer

Android Application Analyzer The tool is used to analyze the content of the android application in local storage. Install the dependency using following command chmod +x setup.sh ./setup.sh Use the following command to run the tool using python3 python -m venv androidapplicationanalyzer...

fernflower

fernflower Quickly decompile class files in the terminal Usage: root@kitploit: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

EUVD-2023-30059

Malicious code in bioql PyPI...

EUVD-2023-30060

Malicious code in bioql PyPI...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

Design/Logic Flaw

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

JD-GUI 代码问题漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originated when the program allowed an attacker to deserialize it via UIMainWindowPreferencesProvider.singleInstanc...

JD-GUI 跨站脚本漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originates from a program that allows attackers to conduct XSS attacks via...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26234

CVE-2023-26234 affects JD-GUI 1.6.6 and is caused by deserialization via UIMainWindowPreferencesProvider.singleInstance. Several connected records (NVD, Red Hat, OSV, CNNVD, etc.) corroborate the issue, with CVSS 3.1/3.1 base score 9.8 (CRITICAL) and potential full impact on confidentiality, inte...

CVE-2023-26235

JD-GUI 1.6.6 is affected by an XSS vulnerability that originates in util/net/InterProcessCommunicationUtil.java, as described across multiple sources (e.g., CVE-2023-26235). The vulnerability details consistently show an XSS flaw enabling injection via the specified InterProcessCommunicationUtil....

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

50m-ctf: Various vulnerabilities ultimately lead to attacker control over FliteThermostat server and access to internal accounting application source code

Step 1: The Entry Point 3:50 PM PST, Tuesday Afternoon F434398 This image is the entrypoint for the 50m-ctf. It doesn't look like much at first, but one can clearly see that there's a lot of binary digits in the background. The immediate obstacle to trying to decode it is we don't know how many...