tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

wosind

Readme for "wosind.py" This software is licensed under GPLGNU GPLv3. This tool combines a lot of possibilties of OpenSource Intelligence. The tool uses local shell commands, like ping, host ... and external resources as nmap or external webservices. 1. System prerequisites MacOS oder Linux window...

Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

CVE-2026-87983

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enables files outside the active workspace ...

AndroBugs_Framework

AndroBugs Framework AndroBugs Framework es un sistema de análisis de vulnerabilidades Android que ayuda a desarrolladores o hackers a encontrar potenciales vulnerabilidades de seguridad en aplicaciones Android. Sin una interfaz gráfica llamativa, pero el más eficiente menos de 2 minutos por escan...

CVE-2026-6485

CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...

EUVD-2026-74613

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2025-57489

CVE-2025-57489 Descripción Del blog del desarrollador: Cuando el candado de SuperDuper está desbloqueado para permitir la ejecución sin tener que introducir una contraseña de administrador, un programa de terceros podría utilizar nuestra autorización para ejecutar algo que no sea una copia de...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFD Reflected File Download para MediaWiki Un usuario remoto puede crear una URL especialmente diseñada para el sitio objetivo que, al ser cargada por el usuario objetivo, hará que el script 'api.php' descargue un archivo que contiene comandos de shell CVE-2017-8809. El archivo se...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

EUVD-2026-65059

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

CVE-2026-47827

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...

EUVD-2026-62411

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

CVE-2026-48120

A flaw was found in Kakoune, a code editor. A local attacker could exploit a vulnerability in the bundled autorestore.kak script by crafting malicious backup files. When a user simply opens a file, these malicious backup files can lead to the execution of arbitrary Kakoune and shell commands. Thi...

Malicious code in chai-as-deployer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4da130c2818dc609c23c93511a70a6c207cf19cdf9fdd937e369e07b5f1e492 The package is published as chai-as-deployer but its tarball contains verbatim pino README/docs/type-definitions while the advertised chai plugin is ...