UnConfuserEx

UnConfuserEx Fork mejorado de UnconfuserEx con soporte mejorado para variantes modernas de ConfuserEx2, recuperación anti-manipulación, eliminación de compresor, restauración del flujo de control y reconstrucción de recursos...

SnipRecover-CLI

SnipRecover CLI Detección y restauración de capturas PNG de la Herramienta Recortes de Windows vulnerables a CVE-2023-28303 SnipRecover CLI es una utilidad de línea de comandos mínima y sin dependencias, diseñada para: Detectar archivos PNG modificados por la vulnerabilidad de la Herramienta...

colabcat

Colabcat 在 Google Colab 上运行 Hashcat，并借助 Google Drive 实现会话恢复功能。 使用方法 点击下面的链接，在 Google Colab 中打开一份 colabcat.ipynb 副本： https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb 点击 Runtime、Change runtime type，并将 Hardware accelerator 设置为 GPU。 前往你的 Google Drive，创建一个名为...

drs-malware-scan

使用 AWS 服务对本地服务器进行恶意软件扫描分析 本地服务器恶意软件检测面临的挑战 受预算和资源限制，安全团队难以持续监控所有本地服务器。仅靠基于特征的防病毒软件是不够的，因为现代恶意软件使用了各种混淆技术。服务器管理员过去可能无法全面了解所有服务器上的安全事件。在事件响应期间，如果没有集中监控和告警，确定受损系统和可安全恢复的备份就变得极具挑战性。服务器管理员为高级威胁检测而设置和维护额外的安全工具也是一项繁重的工作。快速的平均检测和修复感染时间至关重要，但如果没有合适的自动化解决方案，就难以实现。...

CVE-2026-43499-T807D

T807D 最终产物—源码一一对应恢复包 生成日期：2026-08-08 结论 本目录已经整理出当前项目中能够找回的完整 popsicle 源码树、必要头文件、嵌入式 su 载荷、生产二进制和运行脚本。 必须区分： 1. r562 SO 和 r557 helper 的生产二进制已完整保留，哈希可复核。 2. 项目没有保存这两个生产二进制编译前的旧源码快照、目标文件或带 DWARF 的完整构建产物。因此，当前源码不能被诚实地标记为“逐字节就是当时编译生产二进制的源码”。 3. 当前保存的源码是 Kit 中唯一完整的 popsicle 源码树，也是 2026-08-05 审查后的维护基线。...

CVE-2025-24104

CVE-2025-24104 写文：沙箱外读取文件 我报告了一个后来被 Apple 追踪为 CVE-2025-24104 的漏洞。在我最初的报告中，我演示了如何利用恶意备份绕过沙箱限制。然而，Apple 最初的描述指出该漏洞可能导致受保护系统文件被修改。我想澄清一下：这个漏洞实际上允许攻击者读取沙箱外的任意文件。 时间线 发现时间： 2024年4月 报告时间： 2024年10月 修复版本： iOS 18.3 beta 1 我的发现 当我深入研究这个问题时，我发现该漏洞源于备份恢复过程中缺乏正确的符号链接验证。具体来说，如果你构造一个备份，其中文件...

CVE-2026-48849-Roundcube-Webmail-Stored-XSS

CVE-2026-48849 - XSS Almacenado, Inyección HTML e Inyección CSS en Roundcube Webmail Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2026-48849 , una vulnerabilidad de Cross-Site Scripting Almacenado XSS, Inyección HTML e Inyección CSS en Roundcube Webmail. La vulnerabilidad...

CVE-2024-57394

CVE-2024-57394 Se identificó una vulnerabilidad en el Sistema de Gestión de Seguridad de Terminales Qi-ANXIN Tianqing probado en la versión 10.0. Esta vulnerabilidad permite a usuarios con pocos privilegios restaurar un archivo en cuarentena a una ubicación arbitraria, como C:\Windows\System32. U...

POC-CVE-2024-44258-Py

PoC Conceptual CVE-2024-44258: Vulnerabilidad de Symlink en iOS Requisito: Python 3.7+ • Licencia: MIT ⚠️ Advertencia: Este repositorio contiene una prueba de concepto PoC desarrollada con fines exclusivamente educativos y de investigación. No es un exploit completamente funcional. Su uso en...

KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e., \\sms,...

CVE-2026-100622

capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...

CVE-2026-100622

Versions of capgo.app through 12.129.0 are vulnerable to a flaw where the application fails to verify the deletion status of bundle artifacts when serving them from the public file read endpoint . This allows unauthenticated attackers to download deleted bundles using cached URLs. Furthermore, ca...

CVE-2026-100622 capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...

CVE-2026-100622 capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

Entorno de verificación de CVE de nginx-ui Este repositorio es para verificar realmente dos CVEs reportados para nginx-ui herramienta de administración GUI web de Nginx en un entorno Docker. CVE-2026-42221 : Secuestro de cuenta de administrador sin autenticación CVE-2026-42238 : Ejecución de...

CVE-2018-16509

CVE-2018-16509 Campo de pruebas Docker "Se descubrió un problema en Artifex Ghostscript anterior a la versión 9.24. La comprobación incorrecta de la «restauración de privilegios» durante el manejo de excepciones /invalidaccess podría ser utilizada por atacantes capaces de proporcionar PostScript...

CVE-2026-92253 Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2026-92253: Improper Link Resolution Before File Access

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: When a non-Ethernet device is used as a slave in a bonding configuration, the IFFSLAVE flag of the bonding device must be restored if the slave device fails. A warning was reported by syzbot1. In this case, the bonding device...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Added the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c. The missing IPSETHASHWITHNET0 macro in ipsethashnetportnet can lead to the use of the incorrect CIDRPOSc for calculating array offsets, which...