macos_sandbox

Introduzione a macOS - la sandbox delle App Continuando con la mia serie di articoli sulla transizione a macOS, vorrei parlare un po' della sandbox delle App di macOS. È vivamente consigliato leggere prima l'articolo Struttura delle app macOS - darò per scontato che il lettore conosca la...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

windows-api-function-cheatsheets

Windows-API-Funktions-Spickzettel Kontakt 🌨️ Tetsuo: https://www.x.com/tetsuo Inhaltsverzeichnis Windows-API-Funktions-Spickzettel Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamic-Link-Library-Verwaltung DLL Synchronisierung Interprozesskommunikation Windows-Hooks...

CVE-2026-81726

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagge...

EUVD-2026-67076

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagge...

IOBitUnlockerUnlocker

परिचय 0 दिन किसी भी फ़ाइल को स्थानांतरित या कॉपी करता है। चेकसम ट्रिक के साथ पिछले पैच को बायपास करता है। राइटअप: https://nathan2.com/files/iobit.pdf समग्र जानकारी: https://nathan2.com/posts/iobit/ मैंने यह इस बात को जाने बिना खोजा कि इससे पहले एक और पिछला एक्सप्लॉइट था जिसने इसे पहले खोजा था।...

windows-api-function-cheatsheets

Windows-API-Funktions-Cheatsheets Kontakt 🌨️ Snowcrash: [email protected] Inhaltsverzeichnis Windows-API-Funktions-Cheatsheets Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamische Linkbibliothek DLL-Verwaltung Synchronisierung Interprozesskommunikation...

CVE-2024-4577

lol CVE-2024-4577 1. comando exploit RCE valore root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory trova...

CVE-2026-22812

CVE-2026-22812 Visão Geral Uma ferramenta de exploração em Python para a vulnerabilidade de Execução Remota de Código RCE no OpenCode que afeta versões v1.0.216. Esta ferramenta fornece múltiplos vetores de ataque, incluindo execução de comandos, leitura/escrita de arquivos, upload/download de...

EUVD-2026-66804

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

CVE-2026-66493

Path Traversal nelle operazioni sui file Elimina / Copia / Sposta PhocaCommander ≤ 6.1.3 — Admin autenticato manipola file al di fuori della webroot SOMMARIO Il gestore delle azioni sui file in PhocaCommander costruisce i percorsi di origine e destinazione a partire da parametri codificati in...

HaE

Potenzia l'hacker etico per operazioni efficienti. Versione Network: overspace-labs/HaENet Versione File: overspace-labs/HaEFile Versione README: English | 简体中文 Introduzione al Progetto...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

CVE-2026-75333

yx-image-recognition v1.0 contains a Path Traversal vulnerability where parameters such as dir and filePath are passed directly to new File() for file system operations without any path sanitization or whitelist validation. The CVSS 3.1 score is 7.5 (High) , reflecting a network vector with no pr...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution

Laravel version 8.4.2 and before with Ignition before 2.5.2 allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2. id: CVE-2021-3129 info: name:...

Log4Jolokia

Log4Jolokia Descrizione: Implementazione Python3 per sfruttare gli MBean di Log4J tramite Jolokia Utilizzo: Aiuto generico: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target targ...

CVE-2026-74369

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luofileunpreservefiles and luofilefinish In luofileunpreservefiles and luofilefinish, reorder moduleput and xaerase to ensure the file handler module remains pinned while its operations are being accessed...