CVE-2024-10449-patch

Parche para CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Pasos: Descarga el archivo loginAction.php parcheado de este repositorio https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php y reemplaza la versión vulnerable con este. Edita el...

CVE-2017-4490-

CVE-2017-4490 He realizado algunos experimentos y he tenido éxito en explotar el archivo .bashrc. Especialista en escribir y decorar en la terminal. He creado una debilidad en el archivo .bashrc y he logrado impedir el terminal. La debilidad existe conmigo, funciona en todos los sistemas Linux...

SetupHijack

SetupHijack Resumen SetupHijack es una herramienta de investigación de seguridad que explota condiciones de carrera y gestión insegura de archivos en procesos de instalación y actualización de Windows. Se dirige a escenarios donde instaladores o actualizadores privilegiados colocan archivos en...

TeleShadow2

TeleShadow 2 TeleShadow2 - 高级 Telegram 桌面会话劫持工具！ 窃取桌面 Telegram 从未如此简单！ 设置发件人和收件人的邮箱及发件人详细信息，或使用 Telegram API！编译后发送给受害者。 如何使用会话文件？ 删除 "C:\Users\YourName\AppData\Roaming\Telegram Desktop\tdata" 文件夹内的所有内容，然后将从受害者处收到的 tdata 文件夹内的解压缩文件替换到你的 Telegram tdata 文件夹中！ 演示？...

dirtycow-replacer

POR FAVOR TEN EN CUENTA QUE NO ESTOY PROBANDO FORMALMENTE ESTE CÓDIGO SE ESTÁ DISEÑANDO COMO UNA HERRAMIENTA EDUCATIVA ¿Qué hace? android-dirtycow-replacer utiliza el exploit dirtycow de CVE-2016-5195 para parchear una lista de más de 1000 archivos. Puedes editarlo para que sean 10000, pero 1000...

o365-attack-toolkit

o365-attack-toolkit 是什么 o365-attack-toolkit 允许操作者执行 OAuth 钓鱼攻击。 我们决定从静态定义的旧模式转向与账户进行完全“实时”交互。 一些变化 交互式邮件搜索 - 允许你像拥有完全访问权限一样搜索用户邮件。 发送邮件 - 允许你从用户邮箱发送包含附件的 HTML/TEXT 邮件。 交互式文件搜索和下载 - 允许你使用特定关键词搜索文件并离线下载。 文件替换 - 作为宏后门功能的替代方案实现。 架构 该工具包由几个组件组成 钓鱼端点 钓鱼端点负责提供执行 OAuth 令牌钓鱼的 HTML 文件。 后端服务...

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Justificación Alyssa Milburn https://twitter.com/noopwafel descubrió un error de condición de carrera TOCTOU en sudo cuando se utiliza la configuración DigestSpec. La configuración DigestSpec se puede utilizar para permitir que un usuario ejecute sudo en un binario s...

CVE-2020-1066-EXP

Referencia Esta vulnerabilidad es una vulnerabilidad de elevación de privilegios local por reemplazo de archivos arbitrarios causada por el manejo incorrecto de objetos de enlace simbólico por parte del servicio Windows CardSpace Declaración El autor proporciona el PoC únicamente con fines de...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Instalación TrollStore AltStore Créditos https://github.com/zhuowei/MacDirtyCow exploit de MacDirtyCow https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

UBUNTU-CVE-2026-86469

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

CVE-2026-86469

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

CVE-2026-16727

CVE-2026-16727 describes a race condition in ASUS Armoury Crate caused by Concurrent Execution using a shared resource due to improper synchronization. The vulnerability allows a local user to replace a crafted file and achieve arbitrary code execution with elevated privileges. Affected product: ...

EUVD-2026-50946

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...

CVE-2026-50148

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by...

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a malicious one. Honeywell also recommends...