cracked

Cracked Descarga y entrena tus habilidades de retro-ingeniería 🖳 ¿Qué es Cracked? Cracked es una TUI para descargar rápidamente retos de crackmes.one mientras permaneces en tu terminal. ¿Cómo usar Cracked? Instalación root@kitploit: cargo install cracked Uso root@kitploit: $ cracked --help Usage:...

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

CVE-Vulnerability-Information-Downloader

CVE 漏洞信息下载器 通用漏洞评分系统 CVSS 是一个免费开放的行业标准，用于评估计算机系统安全漏洞的严重程度。 漏洞利用预测评分系统 EPSS 估计软件漏洞在现实中被利用的可能性。 CISA 发布了一份已知被利用漏洞的列表。 该项目从这三个来源下载信息，并将它们合并到一个列表中。 扫描器会显示 CVE 编号和 CVSS 评分，但通常不会导出完整详细信息，例如“利用性评分”或“是否需要用户交互”。通过添加 EPSS 评分，您有更多选择来决定首先处理哪些漏洞，并根据对您环境有意义的阈值进行筛选。 您可以使用这些信息来丰富您的漏洞扫描器（如 OpenVAS）提供的信息，以优先进行修复。...

WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion

WordPress MDC YouTube Downloader 2.1.0 plugin is susceptible to local file inclusion. A remote attacker can read arbitrary files via a full pathname in the file parameter to includes/download.php. id: CVE-2015-5469 info: name: WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion author:...

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

snapchat-map-scraper

Snapchat 故事下载器 该程序可以搜索 Snapchat 的公开 Snap Map 在多个地点并下载所有故事，以便后续调查和 分类。关于 Snapchat 如何决定哪些视频出现在地图上的哪个“点”，目前尚不清楚，因此爬取器还可以将爬取的地理位置随机化几百米，以期让 API 提供更多相关视频。 已在 Linux 上测试过，但应该也能在 Windows/Mac 上运行（需安装视频播放器）。 安装说明 root@kitploit: git clone https://github.com/nemec/snapchat-map-scraper.git cd...

EUVD-2026-67077

NLTK: Downloader.download follows hardlinks and overwrites outside-root files...

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

GHSA-F794-5JV7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

krustyloader-analysis

Análisis de KrustyLoader Este repositorio contiene recursos relacionados con el análisis realizado sobre KrustyLoader y disponible en esta publicación de blog: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. un script de Python para...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation. Mitigation Upgrade the nltk...

BlackLotus-Z2A-Challenge

BlackLotus-Z2A-Challenge BlackLotus-Z2A-Challenge, nada que ver aquí por ahora, por favor sigue adelante Primero lo primero Solo por razones estéticas, tomaré prestadas robaré descaradamente : de la solución de @darthmaulwareRyan “DM” Smith las reglas de detección de YARA solo para que se vea...

rust-reversing-workshop-recon-2024

Reversing di binari Rust: un passo oltre le stringhe - Workshop REcon 2024 Questo repository contiene i file supplementari per il workshop Reversing di binari Rust: un passo oltre le stringhe workshop al REcon 2024, presentato il 28 giugno 2024. Durante la presentazione, costruiremo e faremo...

twint-utils

twint-utils Dies sind Nutzungsmöglichkeiten von Twint. Bitte lies unsere Richtlinien zur Zusammenarbeit, um zu diesen beizutragen. Mutuals Detector Mufos.py nutzt Twint, um gegenseitige Follower eines gegebenen Seed-Accounts zu erkennen. Es kann in andere, aufwändigere Pipelines für soziale...

Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f794-5jv7-7672. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and...

CVE-2026-81727

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...

UBUNTU-CVE-2026-81727

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...

CVE-2026-81727 NLTK before 3.10.3 Hardlink File Overwrite via downloader

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...

CVE-2026-81727

NLTK versions before 3.10.3 are affected by a filesystem containment bypass in the Downloader.download and Downloader.incr_download methods. An attacker with write access to a shared downloader directory can create hardlinks pointing to files outside the install root, which are then overwritten d...