InfectPE

Usando questo strumento puoi iniettare x-code/shellcode in un file PE. InjectPE funziona solo con file eseguibili a 32 bit. Perché hai bisogno di InjectPE? Puoi testare i tuoi prodotti di sicurezza. Usalo in una campagna di phishing. Impara come funziona l'iniezione PE. ...e così via. Nel progett...

ASLRay

ASLRay Exploit de bypass de ASLR e DEP/NX para Linux ELF x32/x64 com stack-spraying Propriedades: Bypass de ASLR Bypass de DEP/NX Multiplataforma Minimalista Simplicidade Não corrigível Dependências: Linux 2.6.12+ - funcionaria em qualquer SO Linux baseado em x86-64 BASH - o script inteiro...

CVE-2013-2028-x64-bypass-ssp-and-pie-PoC

für die Umgehung von NX PIE SSP ASLR dieser poc ist nicht stabil. manchmal wird der HTTP-Dienst ausfallen. Sie sollten das morecore-offset korrigieren und die richtige libc-Datei auswählen...

CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com root@kitploit: python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HT...

CTFs

Writeup di CTF Ciao, sono Sean e mi piace fare problemi CTF nel mio tempo libero. La mia attuale posizione mi porta a fare molto binary exploitation e reverse engineering del software, quindi tendo a concentrarmi su queste categorie. La maggior parte dei writeup che vedo online fanno schifo e spe...

exec-prot-bypass

Bypass della protezione dello spazio eseguibile CVE-2022-25265 Questa POC dimostra l'esecuzione di byte situati in una regione del binario presumibilmente non eseguibile, bypassando quindi completamente la protezione dello spazio eseguibile. La causa principale di questo comportamento si trova qu...

CVE-2026-78414

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

PT-2026-80899

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

secpub

Cisco Nexus OS NX-OS - Problemi di "command injection" / sanificazione dei comandi. Scoperto da: Peter Adkins [email protected] Accesso: Locale; è richiesto accesso autenticato. Tracciamento e identificativi: CVE - CVE-2011-2569 Sistemi operativi interessati: Cisco Nexus OS NX-OS...

CVE-2026-71476

A flaw was found in Nx. The self-hosted HTTP remote cache component improperly extracts downloaded cache artifacts, allowing files to be written outside the intended directory. A malicious or on-path Man-in-the-Middle remote cache server can exploit this Zip-Slip vulnerability by providing a...

CVE-2026-71476

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

NPM: Nx: Zip-Slip in the self-hosted remote cache

NPM: Nx: Zip-Slip in the self-hosted remote cache vulnerability discovered by ? in WordPress Npm nx versions = 20.8.0, 22.7.7...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2026-71476 via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.33), @hublo/sentinel (>=1.1.0-alpha.3, <=1.1.0-alpha.4) +39 more potentially affected by CVE-2026-71476 via nx (>=23.0.0, <=23.0.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =1.1.0-alpha.3, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.1 and more Source cves: CVE-2026-71476 Source...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @abelfubu/schematics (0.1.1) +345 more potentially affected by CVE-2026-71476 via nx (>=20.8.0, <=22.7.6)

nx NPM version =20.8.0, =0.0.17, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =8.1.1, =11.0.0, =0.1.1, =0.0.1, =2.23.0, =2.32.0 and more Source cves: CVE-2026-71476 Source advisory: SNYK:JS-NX-18593778...

@nx/powerpack-gcs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2026-71476 via @nx/gcs-cache (>=5.0.0, <=5.0.7)

@nx/gcs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-shared-fs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2026-71476 via @nx/shared-fs-cache (>=5.0.0, <=5.0.7)

@nx/shared-fs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...