CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-51990

Sogou Input Method (Tencent), a widely installed Windows Chinese input method, is vulnerable to one-click remote code execution via its biz_helper.exe protocol handler (sgbiz: URI). A crafted URI triggers the handler, which passes unvalidated arguments to SGMyInput.exe, opening an embedded unsand...

EUVD-2026-80932

An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2026-79298

Howyar Technologies SysReturn (NetCopy feature) prior to v11.3.034 ships a vulnerable IA-32 UEFI boot path (BOOTia32.efi) that still carries the custom RxPE PE loader from the original CVE-2024-7344, loading unsigned payloads from cloak32.dat and bypassing Secure Boot verification. The x64 path w...

stegowiper

stegoWiper：一种强大且灵活的攻击工具，用于破坏隐写恶意软件 过去10年中，许多威胁组织都采用了隐写恶意软件或其他基于隐写术的技术来攻击全球各行各业和地区的组织。一些例子包括：APT15/Vixen Panda、APT23/Tropic Trooper、APT29/Cozy Bear、APT32/OceanLotus、APT34/OilRig、APT37/ScarCruft、APT38/Lazarus Group、Duqu Group、Turla、Vawtrack、Powload、Lokibot、Ursnif、IceID等。 我们的研究（参见...

BlackNET

BlackNET 😈 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro desarrollado con VB.NET. Acerca de BlackNET 🤓 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro construido con VB.NET. Este controlador de botnets viene con muchas funciones y ...

CVE-2020-24032

CVE-2020-24032 Descripción sugerida tz.pl en los appliances virtuales XoruX LPAR2RRD y STOR2RRD 2.70 permite la inyección de comandos del sistema operativo mediante metacaracteres de shell en una zona horaria, a través de cmd=set&tz=OS. Tipo de vulnerabilidad Otro Inyección de comandos del sistem...

Network-Analysis-Tools

Pcap Capture File Analysis Toolv.1 root@kitploit: !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features root@kitploit: 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Us...

CVE-2024-44542

CVE-2024-44542 Description: Se descubrió que todesk v1.1 contiene una vulnerabilidad de inyección SQL a través del parámetro title en /todesk.com/news.html. Tipo de vulnerabilidad: Inyección SQL Vendedor del producto: todesk Versión del producto afectada: todesk - v1.1 Componente afectado:...

CVE-2025-46203

Descripción Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto. Cualquier usuario estudiantes y profesores puede acceder y modificar los registros de estudiantes a través de los endpoints /students/edit/id. Esta funcionalidad está destinada exclusivamente al uso administrativo...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ root@kitploit: Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog:...

GWTMap

描述 GWTMap 是一款用于映射基于 Google Web Toolkit GWT 的应用程序攻击面的工具。其目的是帮助提取隐藏在现代化 GWT 应用程序混淆客户端代码中的任何服务方法端点，并尝试生成示例 GWT-RPC 请求载荷与之交互。 更多信息请访问：https://labs.f-secure.com/blog/gwtmap-reverse-engineering-google-web-toolkit-applications。 需求 该脚本需要 Python3、argparse 和 requests 才能运行。可以通过以下命令安装： root@kitploit: python ...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

routopsy

routopsy Routopsy 是一个专门用于攻击常被忽视的网络协议的工具包。目前，Routopsy 支持针对动态路由协议DRP和第一跳冗余协议FHRP的攻击。已实现的多数攻击利用了武器化的“虚拟路由器”，而非从头实现协议。该工具不仅限于虚拟路由器，还允许通过添加额外的容器或在 python3 中实现更多攻击。 有关使用方法的更多信息，请参阅维基百科 @ https://github.com/sensepost/routopsy/wiki...

CVE-2020-28415

CVE-2020-28415 Descripción sugerida Existe una vulnerabilidad de cross-site scripting XSS reflejado en TranzWare Payment Gateway 3.1.12.3.2. Un atacante remoto no autenticado puede ejecutar código HTML arbitrario mediante una URL manipulada un vector diferente al de CVE-2020-28414. Tipo de...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

CVE-2023-47459

CVE-2023-47459 Descripción Se descubrió una vulnerabilidad en Knovos Discovery v.22.67.0 que permite a un atacante remoto acceder a información confidencial utilizando los componentes: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2020-16270

CVE-2020-16270 Descripción sugerida : OLIMPOKS por debajo de 3.3.39 permite XSS en Auth/Admin ErrorMessage. Un atacante remoto puede usar la vulnerabilidad descubierta para inyectar carga útil maliciosa de JavaScript en los navegadores de las víctimas en el contexto de las aplicaciones vulnerable...