CVE-2017-8367

CVE-2017-8367 Эксплойт PoC для уязвимости CVE-2017-8367 Easy Mov Converter, функция Register, стековое переполнение буфера. Использование Запустите скрипт, и будет создан файл POCPayload.txt , содержащий полезную нагрузку. root@kitploit: python3 payloadgeneratorCVE-2017-15950.py Откройте выходной...

CVE-2026-63632

A flaw was found in Open Neural Network Exchange ONNX. An out-of-bounds read can occur in the onnx.versionconverter.convertversion function when processing Gemm nodes with input tensors having fewer than two dimensions. This vulnerability, caused by a lack of rank checking, could allow an attacke...

pwnkit-exploit

pwnkit CVE-2021-4034 Пример эксплойта для повышения привилегий Этот репозиторий содержит эксплойт для CVE-2021-4034 — локального повышения привилегий в pkexec. Данная реализация основана на описании из раскрытия CVE, которое вам следует прочитать. Если это сработает на вашей машине, значит, вы...

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

norimaci

Norimaci "Norimaci" — это простая и легковесная песочница для анализа вредоносных программ под macOS. Этот инструмент был вдохновлён "Noriben". Norimaci использует возможности OpenBSM или Monitor.app для мониторинга системной активности macOS вместо Sysinternals Process Monitor procmon. Norimaci...

shellex

shellex AVERTISSEMENT : le code le plus moche du monde Convertisseur de shellcode C en hexadécimal. Merci de considérer un don : https://github.com/sponsors/therealdreg Outil pratique pour coller et exécuter des shellcodes dans IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger et...

Exe2Image

Exe2Image Ein einfaches Dienstprogramm zum Konvertieren von EXE-Dateien in PNG-Bilder und umgekehrt. Herunterladen: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe in ein Bild konvertiert...

CVE-2024-11392

CVE-2024-11392 Vulnerabilità di esecuzione di codice in remoto tramite deserializzazione di dati non affidabili in Hugging Face Transformers MobileViTV2 Panoramica ad alto livello ed effetti della vulnerabilità: La vulnerabilità consente a un attaccante di eseguire codice arbitrario sulla macchin...

CVE-2009-1330

CVE-2009-1330 Exploit per buffer overflow in Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 Basato su: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 App vulnerabile disponibile su https://www.exploit-db.com/exploits/10374...

PowerShell-for-Hackers

Hacker Hak5 dell'anno 2022 Indice 1. Descrizione 2. Le Funzioni 3. Contatti 4. Riconoscimenti Funzioni PowerShell per Hacker 🤓💻 Attualmente sono il contributore di payload numero 1 per Hak5. Ho deciso di creare questo repository per condividere tutte le funzioni che ho ideato per sviluppare i mie...

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Impact js2i18next is vulnerable to prototype pollution. When converting translations, it splits nested keys on the key separator default and uses each segment as a dynamic object key while building the output object. A key whose segment is proto e.g. protogcPolluted causes the converter to resolv...

NPM: gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

NPM: gettext-converter: Prototype pollution in js2i18next via crafted translation keys vulnerability discovered by ? in WordPress Npm gettext-converter versions 1.3.3...

GHSA-F4JP-RW7W-CCWG gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Impact js2i18next is vulnerable to prototype pollution. When converting translations, it splits nested keys on the key separator default and uses each segment as a dynamic object key while building the output object. A key whose segment is proto e.g. protogcPolluted causes the converter to resolv...

CVE-2026-65842

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob in a server-side or privileged environment. The converter can make requests to internal network resources and include the...

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-63632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can...

DEBIAN-CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...