CVE-2024-48990-PoC-Testing

CVE-2024-48990-PoC-Testing 🐍🔓 このリポジトリには、needrestart プログラムの脆弱性を実証するための概念実証 PoC が含まれています。この脆弱性は Python のパスを正しく設定しないため、潜在的な権限昇格につながります。この PoC は、この欠陥を悪用して昇格した権限を取得する潜在的な経路を示しています。 ⚠️ 脆弱性の概要 CVE-2024-48990 脆弱性は、needrestart パッケージ内に存在します。具体的には、Python...

EUVD-2026-79395

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Shared Components. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83067

Oracle JDeveloper (Oracle Fusion Middleware, component ADF Shared Components ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead t...

bypass_disablefunc_via_LD_PRELOAD

bypassdisablefunc.phpには3つのGETオプションがあります：cmd、outpath、sopath。 オプションは非常に簡単です。 cmdはあなたの邪悪なコマンドで、 outpathはコマンド出力のファイルパス（読み取りおよび書き込み可能）で、 sopathは共有オブジェクトbypassdisablefuncx64.soの絶対パスです。例： http://site.com/bypassdisablefunc.php?cmd=pwd&outpath=/tmp/xx&sopath=/var/www/bypassdisablefuncx64.so...

zeek-openvpn

zeek::openvpn これは非推奨です。代わりに https://github.com/corelight/zeek-spicy-openvpn を使用してください。 以下のモードでOpenVPNを検出・解析するプラグインです： UDP w/ TLS UDP w/ TLS & TLS Auth TCP w/ TLS TCP w/ TLS & TLS Auth 現時点では、UDPまたはTCPの共有キーモードは検出されません。 このプロトコルアナライザがTLS情報を解析できる場合、ssl.logにデータが出力されます。TCP TLSサポートは動作し、UDP TLSサポートはZeek =...

CVE-2026-73467

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus TACACS+ servers...

CVE-2026-73451

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces SVI in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can cause security ACLs on shared SVIs to stop...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-84850

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...

EUVD-2026-79188

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...

CVE-2026-73467

On affected Arista EOS versions, plaintext TACACS+ shared secrets may be written to agent log files when Tacacs trace level 6 is enabled on agent Aaa (CWE-532). Exploitation requires an attacker with authenticated local administrative shell access and the specific debug trace level explicitly ena...

CVE-2026-73467 On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus TACACS+ servers...

CVE-2026-56907

CVE-2026-56907 is a vulnerability in the VPU (Video Processing Unit) component of Android/Pixel devices. The root cause is improper input validation that can lead to a shared memory overwrite , enabling local escalation of privilege with System execution privileges required. No user interaction i...

EUVD-2026-78961

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit 影響を受けるバージョン 1.9.14 to 1.9.17 root@kitploit: bash run.sh 成功すると以下のようになります root@kitploit: neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + CVE-2025-32463 Sudo chroot 脆弱性再現スクリプト 一時作業ディレクトリを作成中... 作業ディレクトリを作成しました: /tmp/sudoexploit.nc0EjT C言語ペイロード woot1337.c を作成中...

EUVD-2026-79140

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces SVI in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can cause security ACLs on shared SVIs to stop...

CVE-2026-73451 On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces SVI in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can cause security ACLs on shared SVIs to stop...

CVE-2026-73451

Arista EOS on 755 Series and 758 Series platforms is affected by an incorrect initialization issue (CWE-1419) in ingress Security ACLs configured on SVIs in shared mode. Restarting the secondary switchcard forwarding agent or inserting a secondary switchcard can cause these ACLs to stop functioni...

Byepervisor

Byepervisor 概要 PS5 ハイパーバイザーエクスプロイト（ファームウェア = 2.xx 対応）。このリポジトリには 2 つの脆弱性とエクスプロイトチェーンが含まれており、それぞれ独立しているため、どちらか一方を使用できます。一方のエクスプロイトは主に保存目的で提供されており（/oldjumptableexploit）、通常は主要なエクスプロイトチェーン（QA フラグエクスプロイト）のみを使用すればよいです。 この研究は hardwear.io NL 2024 で発表されました。スライドはこちらから入手できます。講演動画は近日公開予定です。 ジャンプテーブルエクスプロイト...