CVE-2009-1330

CVE-2009-1330 针对 Easy RM to MP3 Converter 2.7.3.700 缓冲区溢出的利用 CVE-2009-1330 基于： pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 存在漏洞的应用程序下载地址：https://www.exploit-db.com/exploits/10374...

Exe2Image

Exe2Image 一个简单的工具，用于将EXE文件转换为PNG图像，反之亦然。 下载： https://github.com/OsandaMalith/Exe2Image/releases 截图 将Putty.exe转换为图像。...

shellex

shellex 警告 ：世界上最丑陋的代码 C-shellcode 转十六进制转换器。 请考虑捐赠：https://github.com/sponsors/therealdreg 方便在 IDA PRO、gdb、windbg、radare2、ollydbg、x64dbg、immunity debugger 和 010 编辑器中粘贴和执行 shellcode 的工具。 你是否在将 C-shellcode 转换为十六进制时遇到问题（可能是 C 注释 + ASCII 混合？） 这里就是 shellex。如果 shellcode 可以在 C 编译器中编译，shellex 就能转换它。 只需执行...

norimaci

Norimaci "Norimaci" 是一个简单轻量的 macOS 恶意软件分析沙箱。该工具受 "Noriben" 启发。Norimaci 使用 OpenBSM 或 Monitor.app 的功能来监控 macOS 系统活动，而非 Sysinternals Process Monitor procmon。 Norimaci 由 3 个 Python 脚本组成。 norimaci.py : 主脚本 openbsmconv.py : OpenBSM 审计日志转换器 monitorappconv.py : Monitor.app 数据转换器 OpenBSM 是一个用于审计 macOS...

CVE-2024-11392

CVE-2024-11392 Hugging Face Transformers MobileViTV2 未信任数据反序列化远程代码执行漏洞 漏洞的高层概述与影响： 该漏洞允许攻击者通过向 Hugging Face Transformers 仓库中的 convertmlcvnetstopytorch.py 脚本提供恶意配置文件，在主机上执行任意代码。 如果不知情的用户使用了伴随恶意配置文件的第三方模型，执行 convertmlcvnetstopytorch.py 脚本将导致受害者系统上的远程代码执行（RCE）。 受影响产品 产品：Hugging Face Transformers...

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

pwnkit-exploit

pwnkit CVE-2021-4034 Ejemplo de exploit de escalada de privilegios Este repositorio contiene un exploit de CVE-2021-4034, una escalada de privilegios local en pkexec. Esta implementación se basa en la descrita en la divulgación de la CVE, que deberías leer. Si esto funciona en tu máquina, signifi...

CVE-2017-8367

CVE-2017-8367 Exploit PoC para la vulnerabilidad CVE-2017-8367, funcionalidad de Registro de Easy Mov Converter: desbordamiento de búfer basado en pila. Uso Ejecuta el script y se creará el archivo POCPayload.txt que contendrá el payload. root@kitploit: python3 payloadgeneratorCVE-2017-15950.py...

CVE-2026-55451

A flaw was found in gettext-converter. This vulnerability, known as prototype pollution, occurs in the js2i18next function when processing untrusted translation data. An attacker can craft malicious translation keys containing proto to modify the global Object.prototype. This can lead to a denial...

CVE-2026-55451

gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without...

CVE-2026-55451 gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without...

CVE-2026-55451 gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without...

CVE-2026-55451 gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without...

EUVD-2026-77634

gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without...

CVE-2026-55451

CVE-2026-55451 is a prototype pollution vulnerability in gettext-converter (NPM, versions ≥1.0.3, ≤1.3.2). The js2i18next() function in lib/js2i18next.js splits nested translation keys on the key separator (default ##) and uses each segment as a dynamic object key without rejecting __proto__, con...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: calling inputfreedevice on the allocated iiodev The current implementation of at91tsregister calls inputfreedevice on st-tsinput. However, the err label can be reached before the allocated iiodev is stored to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/virtio: fixed a NULL pointer dereference in virtiogpuconngetmodes drmcvtmode may return NULL, and we should check for this. This bug was discovered by syzkaller: FAULTINJECTION stacktrace: 168.567394 FAULTINJECTION: forcin...

CVE-2026-82791

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82792

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...