ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2021-21985_PoC

CVE-2021-21985 취약한 코드 CLASS/METHODs 사용 가능, PoC 목적의 작은 샘플: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2024-25291

DeskFiler RCE CVE-2024-25291 취약점에 대한 개념 증명Proof-of-Concept입니다. deskfiler - 1.2.3은 애플리케이션에서 Electron webview를 허용하며, 그 결과 원격 코드 실행이 발생합니다. 이 저장소에는 취약한 예제 애플리케이션과 이에 대한 개념 증명POC 익스플로잇이 포함되어 있습니다. PoC로서 이 과정을 자동화하는 파이썬 파일이 있습니다. 1. 취약점 개요: 취약점 대상: RCE를 통한 오픈 리다이렉트 취약점 버전: deskfiler-1.2.3 문제 발생 지점:...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server 탐지 툴킷 CVE-2026-21962 의 영향을 받는 Oracle HTTP Server 및 WebLogic Proxy Plug-in 인스턴스를 식별하기 위한 안전하고 비악용적인 탐지 도구입니다. 🧠 취약점 개요 CVE: CVE-2026-21962 심각도: 치명적Critical 공격 벡터: 네트워크Network 인증 필요: 없음None 이 취약점으로 인해 원격의 인증되지 않은 공격자가 기밀성과 무결성을 손상시킬 수 있으며, 잠재적으로 전체 시스템을 장악할 수...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Oracle WebLogic Server Proxy Plug-In RCE원격 코드 실행 취약점 악용 도구의 Java GUI 버전입니다. 프로젝트 구조 root@kitploit: java-version/ ├── pom.xml Maven 프로젝트 설정 파일 ├── README.md 프로젝트 설명 문서 ├── run.bat Windows 실행 스크립트 └── src/ └── main/ └── java/ └── com/ └── ashwesker/ └──...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in에는 쉽게 악용 가능하고, 인증이 필요 없으며, 네트워크를 통해 접근 가능한 취약점이 있어 HTTP를 통한 침해가 가능합니다. 영향을 받는 지원 버전은 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0입니다. CVSS 10.0 Oracle/NVD 기준이며 HTTP를...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — 치명적인 보안 취약점 😈 🚨 심각도 CVSS 점수: 10.0 / 10 치명적 공개일: 2026년 1월 20일 위험 수준: 🔥 최대 — 즉각적인 조치 권장 🧠 이 취약점이란? 다음에 영향을 주는 치명적인 취약점 : Oracle HTTP Server Oracle WebLogic Server 프록시 플러그인 Apache 및 IIS용 이 결함으로 인해 인증되지 않은 원격 공격자 가 로그인 자격 증명 없이 HTTP 를 통해 영향을 받는 서버를 손상시킬 수 있습니다. 🎯...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093315 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.25 and prior and 8.0.15...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093283 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

UBUNTU-CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169 Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

EUVD-2026-52573

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

CVE-2026-42169 affects GIMP and its DDS plug-in. The APNG loader has a heap-buffer-overflow when fcTL width exceeds IHDR width, causing writes past heap bounds. A second heap-based overflow in the DDS plug-in arises from a BPP mismatch in load_layer(). Both issues are triggered by opening a speci...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...