Bootloader_Unlock_Anbernic_T820

Anbernic Unisoc T820 ブートローダーアンロックガイド - TheGammaSqueeze - https://github.com/TheGammaSqueeze カスタムファームウェアやカスタム修正をフラッシュする前に、ブートローダーのアンロックが必要です。 ブートローダーをアンロックした後、こちらのアナログスティック感度修正にも興味があるかもしれません: https://github.com/TheGammaSqueeze/BootloaderUnlockAnbernicT820/releases/tag/analogfix 警告:...

Chrome-Extractor

Chrome-Extractor 一个Python脚本，用于从你的Google Chrome数据库中提取所有保存的密码，并将其保存到chrome.txt文件中。 注意： 仅限Windows...

bt2

bt2: Blaze Telegram バックドア ツールキット bt2は、Telegramが提供するインフラと豊富な機能を持つBot APIを使用し、その通信プラットフォームをC&C（コマンド＆コントロール）として若干転用した、IMボット形式のPythonベースのバックドアです。 依存関係 Telepot requests インストール root@kitploit: $ sudo pip install telepot $ sudo pip install requests PS: Telepotが正しく動作するには、requests 2.9.1以上が必要です。 制限事項...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI 参数注入 → RCE（Docker 实验环境 / CTF） 一个自包含、从零构建的 Docker 实验环境 ，演示了 CVE-2024-4577 背后的 真实 参数注入 → 远程代码执行原语。 通过 http://localhost:8080 利用它，获取 shell，并从容器内部读取 flag。 这是一个真实的漏洞，而非模拟漏洞。 该容器会编译一个未打补丁的 PHP 5.4.1 CGI 二进制文件，并以真实易受攻击主机的配置方式将其接入 Apache。其中没有任何虚假的 “if password == flag” 检查——获取 flag...

CVE-2026-52792

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-0293

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

MAL-2026-10217 Malicious code in dotnet-runtime-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10c75766303f8c3bf261487e341e537f103116026309006ab71d977aacdd235 The package's postinstall lifecycle script package.json line 7: "postinstall": "node install.js" runs install.js, which on Windows writes a PowerShel...

BIT-PYTHON-MIN-2026-3298 Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...

Walksnail-Ascent-FPV-VRX-Rooting-Exploit

Walksnail-Ascent-FPV-VRX-Rooting-Exploit IMPORTANT: OS must b...

SUSE CVE-2026-33414

Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $...

CVE-2026-39836

The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...

CVE-2026-3298

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...

CVE-2026-3087

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

PT-2026-35528

Name of the Vulnerable Software and Affected Versions CPython affected versions not specified Description On Windows, the shutil.unpack archive function fails to properly check for absolute paths within ZIP archives. If an archive contains a path with a drive letter e.g., C:, files may be extract...

CVE-2026-3298

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...

PSF-2026-20

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...

PT-2026-33988

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description On Windows systems, the sock recvfrom into function within asyncio.ProacterEventLoop lacks a boundary check for the data buffer when the nbytes parameter is used. This flaw can lead to an...

DEBIAN-CVE-2026-33414

Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $...

CVE-2026-33414

Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $...

CVE-2026-33414 PowerShell Command Injection in Podman HyperV Machine

Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $...