CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Solidity 汇编返回值大小混淆 程序代码 Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc"; requiresuccess, "call failed"; //...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

SUSE-SU-2026:4129-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...

Security update for tomcat

This update for tomcat fixes the following issues: CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority...

SUSE-SU-2026:4126-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: Apache Tomcat: HTTP/2...

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5, 25.0.13 and...

yararules

yararules Yara 规则；也是规则。 这是一个仓库，收集了我自己的 YARA 规则，并与公开可用的 YARA 规则整合在一起，这些规则来自开源来源，经我打磨和 QA 测试。 联系方式：craiu at protonmail.ch...

Exploit for CVE-2026-82222

CVE-2026-82222 — GiveWP Unauthenticated PHP Object Injection →...

LdrLockLiberator

LdrLockLiberator 当 DLLMain 是唯一途径时 LdrLockLiberator 是一系列技术集合，用于在执行代码时逃出或以其他方式避开 Loader Lock——无论是从 DllMain 中，还是在任何其他可能存在该锁的地方。它与《完美 DLL 劫持》文章一同发布。我们为你提供解锁库加载器的 钥匙 ，让你可以在自己的计算机上随心所欲地处理你的加载器！ 这些技术尽可能做到通用、干净且 100% 安全 。它们的设计目标是在不修改内存保护或指针的情况下工作。这对于与现代漏洞缓解机制保持兼容至关重要。唯一官方支持的架构是 x86-64（32 位已基本绝迹）。 想了解为什么...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell A bash script demonstrating the manual exploitation of CVE-2016-10204 against a target endpoint, leading to upload of a php webshell. Currently, the webshell variable is set for a MySQL payload. This can be replaced with whatever backend you need to target. More information...

how-to-bypass-aslr-on-linux-x86_64

在 Linux x86-64 上绕过 64 位 ASLR 在这篇文章中，我将讨论 Samuel Groß 在他的 Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass 中描述的技术在 Linux x8664 上绕过 ASLR 的应用。 为了展示这一点，我将解决来自 Buckeye CTF 的一个 pwnable 挑战，即 guessgod。 我会尽量让内容对初学者友好，如果你觉得自己已经足够自信，或者只想直接看漏洞利用，可以随意跳过任何部分。 0. 引言...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 WIN目录介绍 a、开机启动程序目录 root@kitploit: C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持 root@kitploit: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup...

potential-cassandra

CVE-2024-23114 Preparar el entorno Necesitaremos una instancia de Mysql docker run --rm -d --name cassandra -p 9042:9042 cassandr Ahora necesitaremos crear las tablas requeridas: Tienes dos archivos: employee.sql y employeecompleted.sql Ejecuta el siguiente comando: docker exec -it cassandra bash...

wafparan01d3

快速 WAF“偏执”诊断评估 WAFPARAN01D3 Web 应用程序防火墙偏执级别测试工具。 — 来自alt3kx.github.io -blue.svg 偏执级别简介 本质上，偏执级别（PL）允许你定义核心规则集的激进程度。 参考：https://coreruleset.org/20211028/working-with-paranoia-levels/ 工作原理 wafparan01d3.py python3 脚本通过使用基于 GET 参数编码的有效载荷，将恶意请求放置在 HTTP 请求的不同部分，评估结果记录在你机器上生成的报告调试文件 wafparan01d3.log 中。...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

lightwave

What is Lightwave Project Lightwave is an open source project comprised of enterprise-grade, identity and access management services targeting critical security, governance, and compliance challenges for Cloud-Native Apps within the enterprise. Through integration with Project Photon, Project...

CISA Malcolm

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

BIT-TOMCAT-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

BIT-TOMCAT-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at...