LibTP_Gadget

LibTPGadget Esta é uma generalização do https://github.com/AlmondOffSec/LibTPLoadLib para fazer proxy de APIs com um número arbitrário 11 no máximo, na verdade, mas suficiente de argumentos. Fornecido como uma biblioteca compartilhada do Crystal Palace. API tornada compatível com o LibTP do...

PT-2026-46991

Name of the Vulnerable Software and Affected Versions mcp-server-kubernetes versions prior to 3.7.0 Description The kubectl generic tool in mcp-server-kubernetes passes user-supplied flags and arguments directly to kubectl without an allowlist, enabling a privilege escalation attack. An attacker...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

Arbitrary Code Execution

Bitcoin and Dogecoin are vulnerable Arbitrary Code Execution. The vulnerability is due to the application unsafely passing the -platformpluginpath argument, which can be triggered by a .desktop file resulting in arbitrary code execution...