cve-2021-4034

cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...

vhf-morse-transmitter-monitor

📡 VHFモニターRFトランスミッター（TEMPEST / EMIサイドチャネルモールス信号生成器） 著者: TA1EEI Efe Işık バージョン: 1.2 ライセンス: MIT（オープンソース / 教育・実験用） 📰 掲載メディア Hackaday - Get Your Monitor Transmitting VHF With A Browser Tool RTL-SDR.com - An HTML Browser Page That Uses Display Pixel Clock EMI Leakage to Transmit VHF Morse Code 📌...

cve-2020-7247

cve-2020-7247 익스플로잇 제목: OpenSMTPD 6.6.2 - 원격 코드 실행. 새 날짜: 2020-01-29. 익스플로잇 작성자: 1F98D. 원본 작성자: Qualys Security Advisory. 공급업체 홈페이지: https://www.opensmtpd.org/. 소프트웨어 링크: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1. 버전: OpenSMTPD 6.6.2. 테스트 환경: OpenBSD 6.6, OpenBSD 6.5, OpenBSD 6....

CVE-2022-30525

CVE-2022-30525 CVE-2022-30525 POCエクスプロイト 使用方法 root@kitploit: usage: exploit.py -h -t TARGET -lhost LOCALHOST -lport LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET IP address of the target, eg: https://127.0.0.1:9443 -lhost LOCALHOST, --localhos...

HeimShell

HeimShell CVE-2023-51803 HeimShell 은 CVE-2023-51803에 대한 익스플로잇으로, LinuxServer.io Heimdall≤ 2.5.6의 임의 파일 업로드 취약점을 활용합니다. 대상 버전을 자동으로 감지하여 익스플로잇 가능 여부를 경고하거나 SHELLURL로 정의된 PHP 셸을 원격으로 가져옵니다. ≤ 2.2.2 : 임의 파일 업로드가 가능하지만 파일은 정적으로 제공되며 URL은 원격으로 가져오지 않습니다. ≥ 2.2.3 & ≤ 2.5.6: 아이콘 URL 업로드를 통해 PHP 셸을 원격으로...

PaloAltoRceDetectionAndExploit

PaloAlto RCE 탐지 및 익스플로잇 CVE-2017-15944 취약점에 대한 탐지 지금까지 어떤 취약점 스캐너도 이 취약점을 탐지하지 못함 탐지 및 익스플로잇...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134에는 인증되지 않은 공격자가 Confluence Server 또는 Data Center 인스턴스에서 임의 코드를 실행할 수 있게 하는 OGNL 주입 취약점이 존재합니다. 이 스크립트는 Shodan 검색 엔진에서 CVE-2022-26134에 취약한 서버를 찾을 수 있습니다. 조직 이름을 다음과 같이 입력하기만 하면 됩니다. Shodan에 쿼리를 만들어 모든 취약한 서버를 가져올 것입니다. 사용법: python main.py "organisation name" 사전 ...

The vulnerability of the Workers mechanism in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the Workers mechanism in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to writing beyond the buffer limit. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the sandbox by using a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox by using a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to writing beyond the buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the sandbox by using a specially created HTML page...

MAL-2026-15814 Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

Debian dsa-6481 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6481 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6481-1 [email protected] https://www.debian.org/securit...

RockyLinux 8 : gimp:2.8 (RLSA-2026:62507)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...

Linux Distros Unpatched Vulnerability : CVE-2026-84349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-84353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute...

Sangoma Switchvox SQL Injection Vulnerability

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution...

Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows a perpetrator to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created HTML page from a remote location...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code within the sandbox.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the browser’s sandbox environment, through the use ...