oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

WordPress Pie Register <3.7.0.1 - Cross-Site Scripting

WordPress Pie Register plugin before 3.7.0.1 is susceptible to cross-site scripting. The plugin does not sanitize the invitaioncode GET parameter when outputting it in the Activation Code page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

Python Flask-Security-Too <=5.3.2 - Open Redirect

An open redirect vulnerability exists in the python package Flask-Security-Too prior to version 5.3.3. Attackers can abuse the 'next' parameter on the /login and /register routes to redirect unsuspecting users to malicious sites via crafted URLs, which could lead to phishing or other attacks NVD...

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

WordPress Pie-Register <2.0.19 - Cross-Site Scripting

WordPress Pie Register before 2.0.19 contains a reflected cross-site scripting vulnerability in pie-register/pie-register.php which allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URL. id: CVE-2015-7377 info: nam...

WordPress Pie Register <3.8.2.3 - Open Redirect

WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

Binvariants

Binvariants: Register-Level Invaraint-Guided Fuzzing for Binaries This repository provides the source code for Binvariants : a prototype fuzzing framework that leverages register-level likely invariant violations for fuzzing binaries. This work is presented in our paper Binvariants: Enhancing...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 – 인증 우회 정보 WordPress용 Social Login and Register Discord, Google, Twitter, LinkedIn 플러그인은 7.6.4 버전까지 인증 우회에 취약합니다. 이는 플러그인을 통해 검증된 로그인 과정에서 사용자가 제공한 정보의 암호화가 충분하지 않기 때문입니다. 이로 인해 인증되지 않은 공격자가 사이트의 기존 사용자예:...

CVE-2021-24647

CVE-2021-24647 CVE-2021-24647 Pie Register 3.7.1.6 - 未認証の任意ログイン 情報 root@kitploit: usage: exploit.py -h -w URL -p PATH options: -h, --help show this help message and exit -w URL, --url URL URL of the WordPress site -p PATH, --path PATH Path of the Login Page /login/ or /pie-registration/ 使用方法...

gapps

Gapps Gapps는 다양한 보안 프레임워크에 대한 진행 상황을 쉽게 추적할 수 있는 보안 규정 준수 플랫폼입니다. ❄️ Gapps 사이트 보기 🏠 연락에 관심이 있으신가요? 디스코드에 가입해 주세요. 목차 1. 시작하기 2. FAQ 새로운 기능 ❄️ SOC2, NIST CSF, NIST-800-53, CMMC, HIPAA, ASVS, ISO27001, CSC CIS18, PCI DSS 및 SSF가 추가되었습니다! 총 10개의 프레임워크입니다. 멀티 테넌시, OIDC SSO 감사자와의 협업 위험 등록부 파일 저장을 위한...

oregami

Oregami """ 이 레지스터는 무엇에 사용되나요? 음.. 그냥 veryuniquename으로 이름을 바꾸고, 텍스트 검색으로 모든 참조를 찾아야겠다! 좋아.. 검색이 끝나길 기다리는 중.. 아직도.. 완료! 이제 검색 결과 중 어떤 것이 현재 레지스터의 사용 프레임과 관련 있는지 이해해야 해. 그렇게 어렵진 않겠지, 그렇죠? """ 이런 일이 어쩌면 여러 번 발생했다면, 당신은 재미있는 것을 만나게 될 것입니다! Shift-X만 누르면 문제가 사라집니다! 사용 프레임 내에서 레지스터의 이름을 다시 지을 수도 있습니다...

x18-leak

x18-leak =================================================================================================== iOS 11.2 では、kASLR スライドを特定するために利用できるカーネル情報漏洩が導入されました。この問題は、新しく追加された機能 ARMKERNELPROTECT が原因で、threadgetstate を使用してスレッドのレジスタ値を取得する際に、カーネル関数 Lel0synchronousvector64long のアドレスが誤ってレジスタ x18...

PSI_BOF

ProcessInspect BOF プロセスメモリ、アドレス、シンボルを検査できるCS BOFです！ コマンド概要 コマンド| 説明 ---|--- lm| すべてのロード済みモジュールをベースアドレス、エントリポイントなどとともに一覧表示します addr| 指定されたメモリアドレスのバイトを出力します meminfo| 指定されたメモリアドレスの情報を出力します lt| 現在のプロセスのすべてのアクティブスレッドを基本情報とともに一覧表示します regdump| スレッドのレジスタの内容を出力します パッチを送ってください！さらにコマンドの提案も歓迎します！ BOFコマンド lm...

brokentooth

brokentooth CVE-2018-4327 の POC（少なくとも私はそう考えています。CVE-2018-4327 と CVE-2018-4330 はどちらも @SparkZheng によって議論されましたが、どちらのバグがどれに対応するのかは彼からは明確ではありません。彼が最初に説明したのがこれだったので、推測しています）。 iPhone 6S 11.3.1 でテスト済み 11.4 までは動作するはずです SpringBoard といくつかのサービス上で、PC（IP レジスタの ARM 版）を任意の値に設定できます。コードを実行してから BT...

DEBIAN-CVE-2026-98042

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...

CVE-2026-98042

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...

CVE-2026-98084

In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks When processing calls to bpfloop verifier marks R1 and R4 as precise. R1 tracks loop iterations number and because of the 'callbackdepth R1' mechanics in...

CVE-2026-98042 bpf: Don't resurrect a scalar id dropped by collect_linked_regs()

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...