CVE-2022-35501

CVE-2022-35501 Stored Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The post creation functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the title field, leading to XSS...

tenet

Tenet - 逆向工程师的追踪浏览器 概述 Tenet 是一款用于探索执行轨迹的 IDA Pro 插件。该插件的目标是提供更自然、更人性化的控制方式，以便在给定二进制文件中导航执行轨迹。这项工作的基础源于研究新的或创新方法来检查和提炼软件中复杂执行模式的愿望。 关于该项目的更多背景，请阅读其初始发布时的博客文章。 特别感谢 QIRA / geohot 等人带来的灵感。 发布版本 v0.2 -- 映像基址检测、单元格可视化、断点重构、错误修复。 v0.1 -- 初始版本 安装 Tenet 是一个跨平台（Windows、macOS、Linux）的 Python 3...

ida_ifl

IFL - 交互式函数列表 许可证：CC-BY https://creativecommons.org/licenses/by/3.0/ 这个小插件旨在提供一种用户友好的方式来在函数及其引用之间导航。 此外，它还允许将例如 PE-sieve 生成的报告导入 IDA。支持： .tag 格式（由 PE-sieve、Tiny Tracer、PE-bear 生成） .imports.txt 格式（由 PE-sieve 生成） 适用于 Python 2 的旧版本可通过分支python2 获取 如需 Binary Ninja...

CVE-2026-84395

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

EUVD-2026-84799

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-84395

Adobe Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that could lead to privilege escalation and potentially result in unauthorized write access . Exploitation of this issue does not require user interaction. The CVSS 3.1 score is 7.1 (High) . No specific...

BinAIVulHunter

BinAIVulHunter 一个用于帮助在二进制文件中查找漏洞的 IDA PRO 插件。 使用 IDA PRO HexRays 反编译器结合 OpenAI（ChatGPT）在二进制文件中查找可能的漏洞。 免责声明：使用 AI 在二进制文件中查找漏洞时，返回的结果可能会产生误报，但该工具在我参与过的许多 CTF 比赛中都表现良好（简单/中等……部分困难）。 灵感来源于 Gepetto：https://github.com/JusticeRage/Gepetto 安装： 将 Python 脚本放入 IDA Pro 插件目录。 使用方法： 右键单击反编译代码，选择“在函数中查找可能的漏洞”...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

Uchihash

Uchihash Uchihash is a small tool that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analys...

Kam1n0-Community

What Is Kam1n0 v2? Kam1n0 v2.x is a scalable assembly management and analysis platform. It allows a user to first index a large collection of binaries into different repositories and provide different analytic services such as clone search and classification. It supports multi-tenancy access and...

CVE-2022-36433

CVE-2022-36433 Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading ...

diaphora

δiaphora 安装 使用 Hex-Rays 插件管理器 安装： root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip 手动安装说明见下文。 Diaphora（διαφορά，希腊语中意为“差异”）3.4 版本是截至目前（2026 年）可用的最先进的程序差异比较工具（作为 IDA 插件工作）。它于 2015 年在 SyScan 期间首次发布，此后一直得到积极维护：Diaphora 已经被移植了 11 年，覆盖了从 6.8 到 9.4...

CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Unauthenticated Limited Remote Code Execution Description: The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time...

cve-2024-4406-xiaomi13pro-exploit-files

cve-2024-4406-xiaomi13pro-exploit-files Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro...

pastokrapacefleciks

pastokrapacefleciks，WireShark - PRO 分析器 使用方法： 将您的 .pcapng 文件放入 pastokrapacefleciks 的目录中 root@kitploit: python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py 查看您的 HTML 报告...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

yarasafe

YARASAFE - 使用 Yara 进行自动二进制函数相似性检查 SAFE 是一款用于创建二进制函数嵌入的工具，由 Massarelli L.、Di Luna G.A.、Petroni F.、Querzoni L. 和 Baldoni R. 开发。您可以使用 SAFE 创建自己的函数嵌入，并将其应用于 yara 规则中。 如果您有兴趣，请查看我们的研究论文：https://arxiv.org/abs/1811.05296 如果您在研究中使用本工具，请引用： root@kitploit: @inproceedingsmassarelli2018safe, title=SAFE:...

VulFi

VulFi v3.0 Introduction The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For case...