TwoMillion-Machine-Writeup

حول الجهاز TwoMillion هو جهاز Linux بمستوى صعوبة سهل تم إصداره للاحتفال ببلوغ مليوني مستخدم على HackTheBox. يتضمن الجهاز نسخة قديمة من منصة HackTheBox تحتوي على رمز الدعوة القديم القابل للاختراق. بعد اختراق رمز الدعوة يمكن إنشاء حساب على المنصة. يمكن استخدام الحساب لاستكشاف نقاط نهاية API متعددة،...

miasma-toolkit

Miasma / Shai-Hulud टूलकिट Miasma वर्म एक Mini Shai-Hulud वेरिएंट के लिए घटना विश्लेषण + डिटेक्शन/रिमेडिएशन टूलिंग जो AI-एजेंट / IDE कॉन्फ़िग और npm/GitHub रेपो में ऑटो-रन पेलोड इंजेक्ट करता है। ⚠️ अस्वीकरण — कोई वारंटी नहीं। यह एक सामुदायिक रक्षात्मक टूलकिट है जो "जैसा है" प्रदान की गई है, बिना...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

SafeLine v9.4.1

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the...

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

rtl8812au

RTL8812AU/21AU and RTL8814AU Wireless drivers Only for use with Linux & Android THESE DRIVERS IS DEPRECATED. Use the mac80211 drivers over at https://github.com/lwfinger/rtw88 Important! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE...

CVE-2025-45466

CVE-2025-45466 Voici les détails de la CVE-2025-45466 Divulgation CVE : CVE-2025-45466 Résumé Une vulnérabilité a été découverte dans le chien robotique Unitree Go1 toutes les versions = Go120220511 impliquant des identifiants d'authentification en clair codés en dur , ce qui conduit à un contrôl...

EUVD-2026-71145

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

CVE-2026-85695 FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

FastChat contains an authentication bypass vulnerability in the /registerworker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompt...

CVE-2026-85696

SadTalker (OpenTalker), a talking-head video generation tool, contains an OS command injection vulnerability in its video muxing process . In version v0.0.2 , uploaded audio filenames are interpolated into ffmpeg commands without proper escaping (see src/utils/videoio.py). An attacker can upload ...

CVE-2026-85695 FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

FastChat contains an authentication bypass vulnerability in the /registerworker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompt...

EUVD-2026-71144

FastChat contains an authentication bypass vulnerability in the /registerworker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompt...

CVE-2026-85696 SadTalker OS Command Injection via Audio Filename

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

CVE-2026-85695 FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

FastChat contains an authentication bypass vulnerability in the /registerworker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompt...

CVE-2026-85695

FastChat (lm-sys/FastChat) has an authentication bypass in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses. This enables server-side request forgery (SSRF) and model spoofing : attackers can register malicious workers under victim model n...

CVE-2026-85696 SadTalker OS Command Injection via Audio Filename

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

CVE-2026-85694

LaVague 0.2.35 is vulnerable to remote code execution via its PythonFromMarkdownExtractor.extract_as_object function, which uses eval on untrusted language model output derived from web page content. An attacker can perform indirect prompt injection through a web page to inject malicious Python c...

CVE-2026-85694 LaVague 0.2.35 Remote Code Execution via eval extraction

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...