Lucene search
+L

33 matches found

Kitploit
Kitploit
added 2026/09/15 7:33 p.m.9 views

objection

📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包,基于 Frida,旨在帮助你评估移动应用的安全状况,无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务,例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单,只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 7:33 p.m.20 views

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 3:47 a.m.8 views

needle

Needle 是一个开源、模块化的框架,旨在简化 iOS 应用安全评估的流程。 注意:此工具已停用,不再维护。我们保留原始项目仅供存档。 Needle 最初是为 iOS 9 和 iOS 10 设计的。此后,Frida 发布并成为移动安全评估的事实标准工具。后来 Needle 中实现了一些常见的 Frida 移动安全脚本,这些脚本在某些情况下表现更好,或解决了 Needle 自定义工具中的一些问题。 随着 iOS 11 的发布,新的安全保护措施对用户有利,但对 Needle 不利。这些增强功能实际上破坏了 Needle 的功能,因此 F-Secure 面临两个选择: 从头重写...

5.8AI score
SaveExploits0References6
Malwarebytes
Malwarebytes
added 2025/09/25 11:47 a.m.53 views

LinkedIn will use your data to train its AI unless you opt out now

LinkedIn plans to share user data with Microsoft and its affiliates for AI training. Framed as "legitimate interest", it won't ask for your permission—instead you'll have to opt out before the deadline. Microsoft has made major investments in ChatGPT’s creator OpenAI, and as we know, the more dat...

6.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/11/07 12:00 a.m.42 views

WordPress Ocean Extra Plugin < 2.0.5 PHP Objection Injection Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

7.2CVSS7AI score0.01216EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/11/01 12:00 a.m.103 views

WordPress PublishPress Capabilities Plugin < 2.5.2 PHP Objection Injection Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

7.2CVSS7.1AI score0.01216EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2022/10/10 12:00 a.m.26 views

WordPress Easy WP SMTP plugin <= 1.4.9 - Auth. PHP Objection Injection vulnerability

Auth. PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in WordPress Easy WP SMTP plugin versions = 1.4.9. Solution Update the WordPress Easy WP SMTP plugin to the latest available version at least 1.5.0...

7.2CVSS1.6AI score0.01216EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/10/10 12:00 a.m.141 views

WordPress Ocean Extra plugin <= 2.0.4 - Auth. PHP Objection Injection vulnerability

Auth. PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in the WordPress Ocean Extra plugin versions = 2.0.4. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 2.0.5...

7.2CVSS3.2AI score0.01216EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/10/10 12:00 a.m.21 views

WordPress PublishPress Capabilities plugin <= 2.5.1 - Auth. PHP Objection Injection vulnerability

Auth. PHP Objection Injection vulnerability discovered by Nguyen Pham Viet Nam in WordPress PublishPress Capabilities plugin versions = 2.5.1. Solution Update the WordPress PublishPress Capabilities plugin to the latest available version at least 2.5.2...

7.2CVSS2.5AI score0.01216EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2022/10/10 12:00 a.m.615 views

Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import intentionally or not a malicious Customizer Styling file and a suitable gadget chain is present on the blog. To simulate a gadget chain, put the following co...

7.2CVSS0.4AI score0.01216EPSS
SaveExploits2
WPVulnDB
WPVulnDB
added 2022/10/10 12:00 a.m.16 views

PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection

The plugin unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site. PoC To simulate a...

7.2CVSS0.3AI score0.01216EPSS
SaveExploits2Affected Software2
Patchstack
Patchstack
added 2022/10/10 12:00 a.m.23 views

WordPress PublishPress Capabilities Pro premium plugin <= 2.5.1 - Auth. PHP Objection Injection vulnerability

Auth. PHP Objection Injection vulnerability discovered by Nguyen Pham Viet Nam in WordPress PublishPress Capabilities Pro premium plugin versions = 2.5.1. Solution Update the WordPress PublishPress Capabilities Pro plugin to the latest available version at least...

7.2CVSS2.6AI score0.01216EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/10/06 12:00 a.m.23 views

WordPress Customizer Export/Import plugin <= 0.9.4 - Authenticated PHP Objection Injection vulnerability

Authenticated PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in the WordPress Customizer Export/Import plugin versions = 0.9.4. Solution Update the WordPress Customizer Export/Import plugin to the latest available version at least 0.9.5...

7.2CVSS2.5AI score0.01216EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2022/10/03 12:00 a.m.67 views

WordPress Kadence WooCommerce Email Designer plugin <= 1.5.6 - Authenticated PHP Objection Injection vulnerability

Authenticated PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in WordPress Kadence WooCommerce Email Designer plugin versions = 1.5.6. Solution Update the WordPress Kadence WooCommerce Email Designer plugin to the latest available version at least 1.5.7...

7.2CVSS2.9AI score0.01243EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/09/05 12:00 a.m.27 views

WordPress NinjaForms plugin <= 3.6.12 - Authenticated PHP Objection Injection vulnerability

Authenticated PHP Objection Injection vulnerability discovered by Alessio Santoru in WordPress NinjaForms plugin versions = 3.6.12. Solution Update the WordPress Ninja Forms plugin to the latest available version at least 3.6.13...

7.2CVSS2.9AI score0.0118EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2022/09/05 12:00 a.m.497 views

NinjaForms < 3.6.13 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import intentionally or not a malicious file and a suitable gadget chain is present on the blog. To simulate a gadget chain, put the following code in a plugin class Evil public...

7.2CVSS0.3AI score0.0118EPSS
SaveExploits2
vulnersOsv
vulnersOsv
added 2021/09/07 11:09 p.m.6 views

@graphprotocol/payments (>=0.0.2-next.a995f4b.40, <=0.1.0), @graphprotocol/receipts (>=0.0.2-next.a995f4b.40, <=0.1.0) +2 more potentially affected by CVE-2021-3766 via objection (>=2.1.2, <=2.2.14)

objection NPM version =2.1.2, =0.0.2-next.a995f4b.40, =0.0.2-next.a995f4b.40, =0.0.2, =0.2.0, =1.25.2 Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...

9.8CVSS7.6AI score0.0147EPSS
SaveExploits1
Kitploit
Kitploit
added 2021/07/04 12:30 p.m.73 views

FRIDA-DEXDump - Fast Search And Dump Dex On Memory

Features 1. support fuzzy search broken header dex. 2. fix struct data of dex-header. 3. compatible with all android versionfrida supported. 4. support loading as objection plugin 5. pypi package has been released Requires frida: pip install frida optional click pip install click Installation Fro...

7.4AI score
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/05/12 7:06 a.m.34 views

Short beacon analysis on the NHS iOS Tracking application

We recently helped the BBC with a piece on the new NHS COVID-19 tracking application. Concerns were raised by some about the ability for the app to track interactions while it was running in the background. There had been some discussion that suggested two iOS devices running the app whilst...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/26 12:00 a.m.72 views

FreeBSD : rubygem-json -- Unsafe Objection Creation Vulnerability in JSON (Additional fix) (40194e1c-6d89-11ea-8082-80ee73419af3)

When parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269. The previous fix was incomplete, which addressed JSON.parseuserinput, but didn't address some other...

7.5CVSS7.3AI score0.13911EPSS
SaveExploits0References3
Rows per page
Query Builder