FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Installation TrollStore AltStore Crédits https://github.com/zhuowei/MacDirtyCow exploit MacDirtyCow https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

SetupHijack

SetupHijack 개요 SetupHijack 은 Windows 설치 프로그램 및 업데이트 프로세스에서 경쟁 조건과 안전하지 않은 파일 처리를 악용하는 보안 연구 도구입니다. 권한 있는 설치 프로그램 또는 업데이터가 %TEMP% 또는 다른 전역 쓰기 가능 위치에 파일을 드롭하면, 공격자가 이러한 파일을 상승된 권한으로 실행되기 전에 교체할 수 있는 시나리오를 대상으로 합니다. 실행하는 데 상승된 권한이 필요하지 않습니다. 파일 시스템 알림을 사용하지 않습니다 대신 변경 사항을 폴링합니다. Authenticode 코드 서명 및...

CVE-2017-4490-

CVE-2017-4490 لقد أجريت بعض التجارب ونجحت في استغلال ملف .basgrc المتخصص في الكتابة والتزيين على الطرفية. أنشأت ثغرة في ملف .bashrc ونجحت في تعطيل الطرفية. الثغرة موجودة لدي وتعمل على جميع أنظمة لينكس لأن figlet يعمل على جميع الأنظمة. فقط اكتب الأمر apt-get install figlet وسيُنشئ لك .bashrc في Ho...

CVE-2020-1066-EXP

Referenz Diese Schwachstelle ist eine lokale Rechteausweitung durch beliebigen Dateiaustausch, die dadurch verursacht wird, dass der Windows CardSpace-Dienst Symlink-Objekte nicht ordnungsgemäß behandelt. Erklärung Der Autor stellt den PoC ausschließlich zu Forschungszwecken bereit. Wenn Leser...

CVE-2024-10449-patch

Patch per CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Passaggi: Scarica il file loginAction.php corretto da questo repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php e sostituisci la versione vulnerabile con questo. Modific...

TeleShadow2

TeleShadow 2 Teleshadow2- उन्नत टेलीग्राम डेस्कटॉप सेशन हाईजैकर! डेस्कटॉप टेलीग्राम को चुराना इतना आसान कभी नहीं रहा! ईमेल और प्रेषक तथा प्राप्तकर्ता का विवरण सेट करें या टेलीग्राम API का उपयोग करें! और संकलन के बाद इसे पीड़ित को भेजें। मैं सत्र फ़ाइल का उपयोग कैसे करूं?...

sudo_digest_toctou_poc_CVE-2015-8239

POC TOCTOU do DigestSpec do sudoers Justificativa Alyssa Milburn https://twitter.com/noopwafel descobriu um bug de condição de corrida TOCTOU no sudo quando a configuração DigestSpec é usada. A configuração DigestSpec pode ser usada para permitir que um usuário execute sudo em um binário se, e...

o365-attack-toolkit

Cos'è o365-attack-toolkit o365-attack-toolkit consente agli operatori di eseguire attacchi di phishing OAuth. Abbiamo deciso di passare dal vecchio modello di definizioni statiche a un modello completamente "interattivo" con l'account in tempo reale. Alcuni dei cambiamenti Ricerca interattiva del...

dirtycow-replacer

PER FAVORE NOTA CHE NON STO TESTANDO FORMALMENTE QUESTO CODICE È IN FASE DI PROGETTAZIONE COME STRUMENTO EDUCATIVO Cosa fa? android-dirtycow-replacer usa l'exploit dirtycow CVE-2016-5195 per patchare un elenco di oltre 1000 file. Puoi modificarlo per arrivare a 10000, ma 1000 dovrebbero bastare...

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

EUVD-2026-50946

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

CVE-2026-16727

CVE-2026-16727 describes a race condition in ASUS Armoury Crate caused by Concurrent Execution using a shared resource due to improper synchronization. The vulnerability allows a local user to replace a crafted file and achieve arbitrary code execution with elevated privileges. Affected product: ...

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...

CVE-2026-50148

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a malicious one. Honeywell also recommends...

CVE-2026-13742

CVE-2026-13742 affects Honeywell IQ MultiAccess, all versions prior to and including 28. The root cause is improper digital signature verification, enabling an attacker with local access and low privileges (no user interaction) to have a downloaded file replaced with a malicious one. CVSS metrics...

CVE-2026-44469

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before...