jscythe

jscythe 滥用 Node.js 的检查器机制，以强制任何基于 Node.js/Electron/v8 的进程执行任意 JavaScript 代码，即使其调试功能已被禁用。 已在 Visual Studio Code、Discord、任何 Node.js 应用程序等环境中测试并运行！ 使用方法 1. 定位目标进程。 2. 向进程发送 SIGUSR1 信号，这将在某个端口上启用调试器（具体端口取决于软件，有时是随机的，有时是固定的）。 3. 通过对比发送 SIGUSR1 前后的开放端口差异，确定调试端口。 4. 从 http://localhost:/json 获取 WebSocket...

Xdebug <= 2.5.5 - Command Injection

Xdebug = 2.5.5 contains an unauthenticated command injection caused by accepting debugger protocol commands without authentication when remote debugging is enabled, letting remote attackers execute arbitrary PHP code and system commands, exploit requires remote debugging enabled. id: CVE-2015-101...

angrgdb

angrgdb Use angr inside GDB. Create an angr state from the current debugger state. Install root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit Usage angrgdb implements the angrdbg API in GDB. You can use it in scripts like this: root@kitploit: from angrgdb import...

CVE-2026-50228

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software versions up to and including 5.2.63 on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in th...

CVE-2026-50228

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software versions up to and including 5.2.63 on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in th...

RunAs-Stealer

RunAs-Stealer Stealer de credenciales de la utilidad RunAs que implementa 3 técnicas: Hooking de CreateProcessWithLogonW, Keylogging inteligente y Depuración remota Uso Los stealers se ejecutan en un bucle while el inyector también en el caso de Hooking en segundo plano; para finalizarlos usa el...

CVE-2015-10141

CVE-2015-10141 root@kitploit: Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 说明 Xdebug 2.5.5 及更早版本（一个 P...

CVE-2019-11043_env

CVE-2019-11043env CLion 远程调试环境...

CVE-2026-Discord

严重漏洞报告：Discord macOS 客户端 日期 ：2026-01-25 目标 ：Discord 客户端（macOS Stable 0.0.373） 作者 ：Antigravity 🚨 执行摘要 我们已在 Discord macOS 客户端（基于 Electron）中发现一个严重的安全漏洞，涉及通过本地配置或命令行标志强制暴露远程调试端口（9222） 。这允许本地攻击者完全绕过身份验证（2FA、密码） ，并在客户端内获得远程代码执行（RCE）上下文。 CVE 状态检查 独立攻击向量 ：该漏洞与此前报告的 CVE-2024-23739（RunAsNode RCE） 不同。 零日状态...

CVE-2026-84400

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

CVE-2026-84400 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

CVE-2026-84400 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

EUVD-2026-83040

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

CVE-2026-84400

CareCam CM2507 IP cameras are affected by an insufficiently protected network maintenance mechanism that can activate a remote debugging service , classified as missing authentication for a critical function. An attacker on the same local network who satisfies certain device state conditions coul...

Malicious code in golaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f9a2a9514f30f4def10f6a0a21b4abf4f882fa29a45c6b7c93e96490f49c13 The package's main module cdpinject.js runs on require. It disables TLS certificate verification process-wide...

PT-2026-60284

Our latest Scorpion Labs blog dives into the research behind CVE-2026-20374, covering UART access, Ghidra, remote debugging, ROP chains, and embedded exploit development. Read the full blog: https://t.co/6bUfLFjkfC https://t.co/9lHSOGJjJY...

BIT-PYTHON-2026-5713 Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail,...

MAL-2026-6189 Malicious code in eyee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743696e9409c97e89816b050f0346b86446464fdbaeead6ae49ddabf50a082ba On require/run, eyee auto-executes main package.json sets main=cdpinject.js and the bottom of the file invokes main unless --stop/--detach is passed...

RLSA-2026:19176 Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...