aimp

AIMP — Protocolo de Malla de IA Un protocolo de red experimental y sin servidor para la sincronización de estado resiliente entre agentes autónomos en redes fragmentadas y de bajo ancho de banda. Construido sobre Merkle-CRDTs e identidad criptográfica — sin autoridad central, sin DNS global,...

ret-sync

ret-sync ret-sync significa Synchronization de Herramientas de Ingeniería Inversa. Es un conjunto de plugins que ayudan a sincronizar una sesión de depuración WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg con un desensamblador IDA/Ghidra/Binary Ninja. La idea subyacente es simple: tomar lo mejor de amb...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

dsync

dsync Plugin de IDAPython que sincroniza las vistas de código descompilado y desensamblado. Consulte los comentarios en el código fuente para más detalles. Requiere IDA Pro 7.3 N.B.: Puede que quieras usar la función de sincronización oficial introducida con IDA 7.3 en su lugar...

idacode

IDACode IDACode facilita la ejecución y depuración de scripts de Python en su entorno IDA sin salir de Visual Studio Code. La extensión de VS Code se puede encontrar en el marketplace. IDACode aún se encuentra en una etapa muy temprana y se espera que haya errores. Por favor, abra un nuevo issue ...

syncord

Syncord root@kitploit: $$\ $$ | $$$$$$$\ $$\ $$\ $$$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$$ | $$ |$$ | $$ |$$ $$\ $$ |$$ $$\ $$ $$\ $$ $$ | $$$$$$\ $$ | $$ |$$ | $$ |$$ / $$ / $$ |$$ | |$$ / $$ | $$\ $$ | $$ |$$ | $$ |$$ | $$ | $$ |$$ | $$ | $$ | $$$$$$$ |$$$$$$$ |$$ | $$ |$$$$$$$\ $$$$$$ |$$...

CVE-2022-32832

CVE-2022-32832 Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6 CVE-2022-32832 is a vulnerability in the AppleAPFSUserClient::methodDeltaCreateFinalize external method selector 49. Here is the decompilation pre-patch: root@kitploit: int64 cdecl...

ida-efitools2

Acerca de Es un plugin de IDA para ampliar las capacidades de ingeniería inversa de UEFI. Basado en ida-efitools con un montón de correcciones y nuevas funciones. Funciona tanto con Python 2 como con Python 3. Soporta versiones obsoletas de IDA Pro 7.x sin garantías. Características Definición de...

CVE-2024-42861

CVE-2024-42861 The DOS attack against IEEE 802.1AS standardgPTP protocol CVE ID CVE-2024-42861 PRODUCT IEEE 802.1AS standard VERSION IEEE 802.1AS-2020, IEEE 802.1AS-2010 PROBLEM DOS attack DESCRIPTION When a port of a device with IEEE 802.1AS enabled receives two PdelayReq messages with different...

CVE-2020-13094

Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-04-14 Vendor: https://www.dolibarr.org/ Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSSv3 Base Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L, I:L,...

The vulnerability of the ioctl request handler FIOSSHMLPGCNF in FreeBSD operating systems allows a hacker to increase their privileges.

The vulnerability of the ioctl request handler FIOSSHMLPGCNF in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ioctl request handler TIOCSCTTY in FreeBSD operating systems allows a attacker to increase their privileges.

The vulnerability of the ioctl request handler TIOCSCTTY in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260918-73-0106

The vulnerability of the fs/smb/client/cacheddir.h component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

AZL-102056 CVE-2026-93047 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

EUVD-2026-82157

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write root@kitploit: python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ ...

tomcat-cluster-session-sync-exp

工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 tomcat cluster sync-session 利用exp 这是一个tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。 使用 先编译出jar包： root@kitploit: mvn clean compile assembly:assembly 生成jar包存在于target目录下 使用，例： root@kitploit: ja...

CVE-2026-76672

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

CVE-2026-76672

CVE-2026-76672 affects the HPE Networking EdgeConnect SD-WAN Orchestrator . An authenticated remote attacker holding only read-only privileges can send a specially crafted request to the cache synchronization endpoint , leading to disclosure of sensitive third-party API tokens and credentials. Su...

CVE-2026-90971

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...