VectoredOverloading

VectoredOverloading Vectored Overloading ist eine lokale PE-Injection-Technik, die erstmals in der Malware KidKadi beobachtet wurde. Sie funktioniert, indem sie das Laden einer legitimen DLL mithilfe von Hardware-Breakpoints HWBP und Vectored Exception Handling VEH manipuliert, um das...

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialisierung bei der Apache Dubbo Hessian2-Ausnahmebehandlung CVE-2021-43297 1. Importieren Sie die beiden Projekte jeweils in zwei Idea-Instanzen. 2. Starten Sie zuerst den Server, indem Sie org.apache.dubbo.samples.basic.BasicProvidermain ausführen. 3. Starten Sie dann die...

Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared Ein Rust Proof of Concept. Mehr dazu in meinem Blog, die gesamte ursprüngliche Forschung stammt von CrowdStrike, dies ist lediglich der POC dafür! Sofern ich nicht blind bin; gibt es nicht viel da draußen POCs etc. im Zusammenhang mit der Entdeckung durch...

struts2_cve-2017-5638

struts2cve-2017-5638 Dies ist eine Art Java-Portierung des Python-Exploits unter: https://www.exploit-db.com/exploits/41570/. Diese Software wurde ohne externe Abhängigkeiten geschrieben. HAFTUNGSAUSSCHLUSS Dieses Tool ist für Sicherheitsingenieure und AppSec-Leute für Sicherheitsbewertungen...

instrumentation_callbacks

instrumentationcallbacks इंस्ट्रुमेंटेशन कॉलबैक विंडोज़ का एक मजेदार और अनडॉक्यूमेंटेड हिस्सा हैं। इस रिपॉजिटरी का सारा कोड MIT लाइसेंस के तहत जारी किया गया है। यह रिपॉजिटरी google style C++ spacing का उपयोग करती है। यदि आपको समस्याएँ, बग्स मिलते हैं, या लगता है कि कोई विशिष्ट फीचर जोड़ा जाना...

ShellGhost

ShellGhost Una tecnica di evasione basata sulla memoria che rende lo shellcode invisibile dall'inizio alla fine del processo. Motivazione Volevo condividere questo POC di self-injection di shellcode per illustrare alcuni concetti di evasione AV/EDR che potrebbero rivelarsi utili per il Red Teamin...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Vulnerabilità di Bypass dell'Autenticazione in Apache Tomcat Panoramica CVE202452316 è una vulnerabilità di bypass dell'autenticazione identificata in Apache Tomcat. Questo problema si verifica quando Tomcat è configurato con un componente ServerAuthContext...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Descrição É possível realizar um ataque RCE com um valor malicioso de Content-Type. Se o valor de Content-Type não for válido, uma exceção é lançada, que é então usada para exibir uma mensagem de erro para um usuário. Versões afetadas Struts 2.3.5 Struts 2.3.31 Strut...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls è un progetto inedito in 2 parti composto da argument spoofing e recupero delle syscall, che abusano entrambi di EH per aggirare gli EDR. Questo progetto include entrambe queste tecniche per fornire una soluzione alternativa alle syscall dirette. Manomissione...

EUVD-2026-64205

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

DEBIAN-CVE-2026-77781

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

CVE-2026-77781 Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage root@kitploit: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in...

moonwalk

moonwalk: DLL-Basisadressen-Finder Dieses Rust-Bibliotheks- und CLI-Tool demonstriert eine alternative Methode, um die Basisadresse geladener DLLs zu finden, ohne einen Prozess-Umgebungsblock PEB-Walk durchzuführen. Diese Technik ist besonders nützlich in Szenarien, in denen PEB-Walking erkannt...

EUVD-2026-63571

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. From 5.0.8 until 5.0.9, ContentRenderer.renderplaceholder in cms/pluginrendering.py can pass stored, attacker-controlled values to ContentRenderer.renderexception when plugin rendering fail...

cve-2026-47893 - LOW - Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

cve-2026-47893 - LOW - Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService...

CVE-2026-53458 Blueprint Studio API exposed internal exception details

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...

The vulnerability of the hp_init_bios_buffer_attribute() function in the drivers/platform/x86/hp/hp-bioscfg/bioscfg.c driver for X86 kernel-based Linux devices allows a attacker to cause a service failure.

The vulnerability of the hpinitbiosbufferattribute function in the drivers/platform/x86/hp/hp-bioscfg/bioscfg.c driver for X86 kernel devices in the Linux operating system is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a...

CVE-2026-19483 The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related ...

EUVD-2026-58476

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related ...