toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2026-95625

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

CVE-2026-95625

The Tauri updater plugin contains a vulnerability where the update manifest—containing the version number, download URL, and signature—is fetched over TLS but is never itself signed or authenticated . While the plugin verifies the raw binary bytes using minisign signatures, the signature does not...

CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader . The root cause is the unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated pri...

EUVD-2026-85166

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

Log4j-Updater

Log4j Updater Con la inevitable necesidad de actualizar el famoso framework de Java llamado Log4j, numerosas empresas necesitan actualizar Log4j en varios equipos al mismo tiempo, lo que requiere tiempo y costo, y ahí es donde entra el Log4j Updater. log4jupdater.sh es un sencillo script bash cuy...

CVE-2026-95624

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-85995

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is invalid. An attacker who can replace ...

EUVD-2026-84577

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-95624

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

EUVD-2026-84575

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is invalid. An attacker who can replace ...

CVE-2026-85995

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is invalid. An attacker who can replace ...

CVE-2026-57239

Foxit PDF Reader LPE Prueba de concepto para CVE-2026-3775/CVE-2026-3780 y CVE-2026-57239 que permite obtener derechos de NT AUTHORITY\SYSTEM mediante el servicio de actualización del lector de PDF de Foxit. Compilación Solo compila el binario, colócalo en tu objetivo y ejecútalo. root@kitploit:...

CVE-2019-19652

CVE-2019-19652 Ataque de degradación de Chevereto - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. Un usuario administrador puede indicar al script de actualización que degrade a otra versión en lugar de actualizar, reintroduciendo fallos anteriores. Debido a la falta de un token CSRF, este ataque también...

PcanExploit

CVE-2024-44610: Exploit de raíz autenticado para PEAK PCAN-Ethernet Gateway FD DR ¿Qué es? Este repositorio contiene un exploit de Prueba de Concepto PoC que ejecutó código como root en las puertas de enlace Ethernet de Peak. Requiere que conozcas las credenciales de la interfaz web. ¿Cómo...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Software afectado: Versiones de Notepad++ anteriores a la 8.8.9 que usan el actualizador WinGUp. Tipo de vulnerabilidad: Omisión de la verificación de integridad de actualización que conduce a la ejecución arbitraria de código. Descripción: El actualizador WinGUp no verifica adecuadamente la...

CVE-2023-7261

CVE-2023-7261 Vulnerabilidad de escalada de privilegios local en DosDevices del actualizador de Google Chrome Detalles: Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Google Chrome. Un atacante debe primero obtener la capacidad de ejecutar código...