176 matches found
CVE-2024-30088__Windows-TOCTOU-exploit
CVE-2024-30088 – 适用于 WinRM 的改编版 PoC 📌 概述 这是原始 CVE-2024-30088 漏洞利用代码的修改版本，经过调整以适用于非交互式环境（WinRM） 。 原始 PoC 会生成一个交互式 cmd.exe，这在 WinRM 中无法正常工作。 本版本侧重于非交互式执行和稳定性 。 🔧 与原始 PoC 相比的更改 将 CREATENEWCONSOLE 替换为 CREATENOWINDOW 添加 WaitForSingleObject 以确保同步执行 添加详细日志（printf + fflush），以便在 WinRM 中可见 移除交互式暂停（getchar）...
wappalyzergo
Wappalyzergo Wappalyzer 技术检测库的高性能 Go 移植版本。受 Webanalyze 启发。 数据来源于： https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 功能特性 使用非常简单方便，代码库干净整洁。 标准化正则表达式 + 自动更新的 wappalyzer 指纹数据库。 针对性能进行优化：手动解析 HTML 以获得最佳速度。 使用 go install 安装 root@kitploit: go install -v...
CVE-2023-6241-Pixel7_Adaptation
CVE-2023-6241 适用于 Google Pixel 7 本仓库将说明如何将 securitylab 在其 GitHub 仓库 中发布的、适用于 Google Pixel 8 的漏洞利用程序改编为适用于 Google Pixel 7。 在开始修改该漏洞利用程序之前，我们根据与 CVE-2023-6241 相关的文章 作出了一个假设，即原始漏洞利用程序在进行必要修补后也适用于 Google Pixel 7 设备。由于这两款设备（在硬件层面）看似不同（对比），因此这一假设是必要的。 工具 以下是用于执行分析以及提取信息或文件所使用到的工具。 Ghidra imjtool（用于替代...
CVE-2026-43499-Poc-Analysis
CVE-2026-43499 Adaptación de escalada de privilegios local para Android arm64 English | Chino Este es un proyecto de adaptación de escalada de privilegios local para Android arm64 para CVE-2026-43499. El proyecto genera target.h basado en la boot.img del dispositivo objetivo y la información del...
SharpBlackout
SharpBlackout 利用 BYOVD 攻击终止 AV/EDR 注意：本项目仅用于教育目的。 Sharpblackout 是 @Blackout 项目的改编版本，原项目由 @ZeroMemoryEx 使用 C++ 开发，其原理是利用 gmer（BYOVD）驱动程序移除 AV/EDR。 我只是想尝试用 C 实现它。 ❗️ 重要提示： 这需要管理员权限才能运行。 ⚠️ 警告： 这可能存在 bug，并且可能无法保持 Defender 或其他程序被终止。 所有功劳归原作者 @ZeroMemoryEx。 演示...
php_filter_chain_oracle_poc
phpfilterchainoraclepoc 概要 Synacktiv チームは、詳細な研究記事 PHP Filter Chains: File Read from Error-Based Oracle を公開しました。この研究は DownUnder CTF 2022 で初めて公開され、@hashkitten によるチャレンジに基づいています。このチャレンジでは、参加者は エラーベースのオラクル を使用して、脆弱な PHP ベースのインフラから /flag ファイルを漏洩するよう求められました。 深い技術的内部（PoC のコメントで確認可能）に踏み込む代わりに、このガイドでは...
CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
AZL-98190 CVE-2026-80717 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
UBUNTU-CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717 sctp: validate Adaptation Indication parameter length
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717 sctp: validate Adaptation Indication parameter length
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
EUVD-2026-67452
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...
CVE-2026-80717
CVE-2026-80717 is an information disclosure vulnerability in the Linux kernel SCTP subsystem. The root cause is that sctp_verify_param() accepts a header-only Adaptation Layer Indication parameter because the generic parameter walker only checks for header presence. sctp_process_param() then read...
Linux Distros Unpatched Vulnerability : CVE-2026-80717
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its paramete...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fix for u8 overflow By continuously sending L2CAPCONFREQ packets, chan-numconfrsp increases multiple times, eventually exceeding the maximum number i.e., 255. This patch prevents this issue by adding a bounda...
CVE-2026-66771
SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes. When another user subsequently opens the adapted application, the injected script executes in the victim's browser session. Successful exploitation could allow the...
CVE-2026-66771
CVE-2026-66771 concerns a cross-site scripting vulnerability in SAPUI5. A key user with content-adaptation privileges can inject malicious script into persisted application changes; when another user opens the adapted app, the script runs in the victim’s browser session. The impact is limited to ...
PT-2026-70043
Name of the Vulnerable Software and Affected Versions SAPUI5 affected versions not specified Description SAPUI5 contains a Cross Site Scripting XSS flaw where a key user with content adaptation privileges can inject malicious script content into persisted application changes. This script executes...