CVE-2020-0418

CVE-2020-0418 Проект Android Studio для генерации APK, используемых для эксплуатации. Для генерации версии 1 APK достаточно оставить закомментированными указанные строки в AndroidManifest.xml Для генерации версии 2 APK достаточно их раскомментировать. Демонстрация на...

CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg Versioni interessate: Windows 11 23H2 Originariamente da qui Leggermente modificato per compilare senza configurazione su Visual Studio...

power-pwn

Gepflegt von: Sichere KI-Agenten überall. Übersicht Power Pwn ist ein Toolset für offensive und defensive Sicherheit für Microsoft 365 Power Platform und KI-Dienste. Wichtigste Funktionen, unter anderem: 💾 PowerDump : Umfassender Tenant-Scan und Datenerfassung 🚪 BackDoor : Backdoor-Flows für...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHub...

CVE-2025-34300POC

Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300 参数： root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 举例： root@kitploit: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测; python .\CVE-2025-34300POC.py -f urls.txt...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

apkstudio

APK Studio ओपन-सोर्स, क्रॉस-प्लेटफ़ॉर्म Qt6 आधारित IDE जो Android एप्लिकेशन पैकेजों के रिवर्स-इंजीनियरिंग के लिए है। इसमें एक मैत्रीपूर्ण IDE-जैसा लेआउट है जिसमें .smali कोड फ़ाइलों के लिए सिंटैक्स हाइलाइटिंग सपोर्ट वाला कोड एडिटर शामिल है। विशेषताएँ क्रॉस-प्लेटफ़ॉर्म, लिनक्स , मैक OS X और विंडोज...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

ForensiX-Studio

ForensiX Studio Piattaforma di Intelligence Forense | Analisi Malware | Motore di Correlazione delle Minacce 🧠 Analisi Multi-Segnale • ⚡ Intelligence Comportamentale • 🎯 Mappatura MITRE ⚠️ AVVERTENZA LEGALE ForensiX Studio è destinato esclusivamente a indagini forensi digitali autorizzate, ricerca...

CrafterCMS-CVE-2025-6384

CrafterCMS प्रमाणित RCE - Groovy सैंडबॉक्स बाईपास CVE-2025-6384 CrafterCMS में प्रमाणित रिमोट कोड एक्ज़ीक्यूशन भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट। भेद्यता सारांश डेवलपर विशेषाधिकारों वाला एक प्रमाणित उपयोगकर्ता रिमोट कोड एक्ज़ीक्यूशन RCE प्राप्त करने के लिए Crafter Studio में Groovy स्क्रिप्ट...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

CVE-2026-76073

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-76073

Label Studio (through 1.23.0 ) has a broken access control flaw in its annotation detail endpoint. The AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() without a get_queryset override, so any annotation is retrievable by primary key. Because permissions are ...

CVE-2026-76073 Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI Queryset

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-76073 Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI Queryset

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...

GHSA-JGVR-6X5W-HX5W Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...

EUVD-2026-62898

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action with a crafted Uniform Resource Locator URL. When another authenticated user selects the stored action from Event Actions and selects...