592906 matches found
CVE-2026-82971
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
proxy v0.7.0
git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...
gradient-untangler
gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...
CVE-2019-18634
CVE-2019-18634 CVE-2019-18634 es una vulnerabilidad que afecta a Sudo en versiones 1.8.25 cuando pwfeedback está habilitado en el archivo sudoers. Permite a un atacante escalar privilegios a root explotando un desbordamiento de búfer basado en BSS, donde se alteran las estructuras de datos y el...
barf-project
BARF : 二进制分析与逆向工程框架 二进制代码分析是计算机科学和软件工程许多领域中的关键活动，涵盖软件安全、程序分析到逆向工程。手动二进制分析是一项困难且耗时的任务，存在一些旨在自动化或协助人类分析师的软件工具。然而，大多数这些工具具有若干技术和商业限制，限制了学术界和从业者社区大部分人的访问和使用。 BARF...
CVE-2026-82971
A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...
CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
aotopsy v1.1.0
AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...
nuclei-CiscoRV320Dump-CVE-2019-1653
Cisco Router Configuration Exposure Vulnerability Vulnerability Description This repository details the exploitation process of a vulnerability in certain Cisco routers that allows exposure of the config.exp configuration file via an accessible public URL. This file may contain sensitive...
CVE-2026-39813
cve-id ⚡ Uso sencillo Usa este proyecto solo en entornos seguros y autorizados como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clone cd Project use python follow below...
ChaosKobra
ChaosKobra 🐍 另一个面向普通用户的子域枚举工具，用 Python3 编写。 🔧 技术与工具 📚 要求 Python 3.9+ pip3 安装 请使用包管理器 pip 安装所需的依赖。如果尚未安装，请使用以下命令进行安装。 root@kitploit: sudo apt-get install python3-pip 建议在虚拟环境中安装 Python 依赖，为此请先安装 venv 包。 root@kitploit: python3 -m pip install venv python3 -m venv env source env/bin/activate 之后运行以下命令：...
seccomp-tools v1.7.1
Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...
GHSA-8X3Q-JPJH-QH5C elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
poc.zip Summary elFinder 2.1.69 is vulnerable to a Server-Side Request Forgery SSRF protection bypass when PHP cURL is unavailable and URL uploads use the fsockgetcontents fallback. An attacker who can submit a URL for server-side upload can use an attacker-controlled DNS hostname that initially...
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
poc.zip Summary elFinder 2.1.69 is vulnerable to a Server-Side Request Forgery SSRF protection bypass when PHP cURL is unavailable and URL uploads use the fsockgetcontents fallback. An attacker who can submit a URL for server-side upload can use an attacker-controlled DNS hostname that initially...
CVE-2026-5843
CVE-2026-5843 PoC Minimal OCI registry that serves a malicious model to exploit the modelfile importlib execution path in mlx-lm. When Docker Model Runner loads the model for inference, model.py executes on the host as the logged-in user. Requires: Docker Desktop ≤ 4.70.x Apple Silicon with Model...
CVE-2026-51738
Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51739
Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...