exploit-cve-2017-5715

Spectre 공격 Spectre는 서로 다른 애플리케이션 간의 격리를 무너뜨립니다. 공격자가 모범 사례를 따르는 오류 없는 프로그램을 속여 비밀을 유출하도록 만들 수 있습니다. 실제로 모범 사례의 안전 검사는 공격 표면을 증가시키며 애플리케이션이 Spectre에 더 취약해질 수 있습니다. 이 익스플로잇은 Linuxx64 전용 시스템의 spectre 취약점을 확인합니다. 컴파일 소스 코드를 컴파일하려면 make를 실행하기만 하면 됩니다. 실행 익스플로잇을 실행합니다 root@kitploit: taskset -c 1...

Linpmem

Linpmem -- Linux용 물리 메모리 획득 도구 Linpmem은 Linux x64 전용 물리 메모리 읽기 도구입니다. Windows용 대응 도구인 Winpmem과 마찬가지로, 이는 전통적인 메모리 덤퍼가 아닙니다. Linpmem은 모든 물리 주소예약 메모리 및 메모리 홀 포함에서 읽을 수 있는 API를 제공하며, 일반적인 메모리 덤핑에도 사용할 수 있습니다. 또한 드라이버는 바이트, 워드, dword, qword 및 버퍼 액세스 모드와 같은 다양한 액세스 모드를 제공하며, 대부분의 표준적인 경우에는 버퍼 액세스 모드가...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit 이 저장소는 Linux x64를 대상으로 하는 CVE-2021-3156 익스플로잇입니다. 상세 내용은 https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 에서 확인하세요. 크레딧: Qualys의 Braon Samedit 원본 권고. 파일들 tcache가 있는 glibc용 익스플로잇 exploitnss.py 모든 요구 사항과...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...

MAL-2026-13996 Malicious code in @nolimit-agent/linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a61df0713e6ffb3921a4819c4c80540bfd596d8b71e4f2015f3ed580c9f804d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @nolimit-agent/linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a61df0713e6ffb3921a4819c4c80540bfd596d8b71e4f2015f3ed580c9f804d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

@ccfly/setup (0.1.17) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.17)

@ccfly/setup-linux-x64 NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.17 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.2) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.2)

@ccfly/setup-linux-x64 NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@ccfly/setup (0.1.1) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.1)

@ccfly/setup-linux-x64 NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

FTP Fetch, Linux x64 Pingback, Reverse TCP Inline

Fetch and execute an x64 payload from an FTP server. Connect back to attacker and report UUID Linux x64 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Linux x64 Command Shell, Bind TCP Inline (IPv6)

Fetch and execute an x64 payload from an FTP server. Listen for an IPv6 connection and spawn a command shell Module Options...

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR and Blazor Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

Malicious code in @emcd-vue/auth (npm)

Part of a coordinated multi-package supply-chain attack impersonating EMCD emcd.io, a legitimate Russian cryptocurrency exchange and mining pool. The attacker registered the @emcd-vue npm scope to pose as an internal Vue.js front-end tooling package from "EMCD Platform Engineering." The package...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions. An attacker can gain elevated privileges by exploiting these permissions locally. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version 10.0.4 or higher. References - Vulnerability Advisor...

Malicious code in @postman/pm-bin-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94045a09bfa0905195be4f028d9e42bcf608154a645b14b2028754dc6e787b80 The package @postman/pm-bin-linux-x64 was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198922

Malicious code in @postman/pm-bin-linux-x64 npm...

Malicious code in athira-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e427393183e173f65795c42251b41cf0af7ad267e64f05e6651dc4e0766b150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4470 Malicious code in athira-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e427393183e173f65795c42251b41cf0af7ad267e64f05e6651dc4e0766b150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read through the loading of a specially crafted file. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version 8.0.12, 9.0.1 or higher. References - GitHub Issue - GitHub Issue - Security Advisory...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow. An attacker can execute arbitrary code by sending malicious requests designed to exploit the vulnerability. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version 9.0.1 or higher. References -...