SetupHijack

SetupHijack Übersicht SetupHijack ist ein Sicherheitsforschungstool, das Race Conditions und unsichere Dateibehandlung in Windows-Installations- und Updateprozessen ausnutzt. Es zielt auf Szenarien ab, in denen privilegierte Installationsprogramme oder Updater Dateien in %TEMP% oder anderen für...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Installation TrollStore AltStore Danksagungen https://github.com/zhuowei/MacDirtyCow MacDirtyCow-Exploit https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

o365-attack-toolkit

Cos'è o365-attack-toolkit o365-attack-toolkit consente agli operatori di eseguire attacchi di phishing OAuth. Abbiamo deciso di passare dal vecchio modello di definizioni statiche a un modello completamente "interattivo" con l'account in tempo reale. Alcuni dei cambiamenti Ricerca interattiva del...

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Begründung Alyssa Milburn https://twitter.com/noopwafel entdeckte einen TOCTOU-Race-Condition-Bug in sudo, wenn die Einstellung DigestSpec verwendet wird. Die Einstellung DigestSpec kann verwendet werden, um einem Benutzer zu erlauben, ein Binary mit sudo auszuführen...

CVE-2017-4490-

CVE-2017-4490 Ich habe einige Experimente durchgeführt und es gelang mir, die Datei .bashrc zu exploitieren. Spezialist für das Schreiben und Verzieren des Terminals. Ich habe eine Schwachstelle in der Datei .bashrc erstellt und es geschafft, das Terminal zu behindern. Die Schwachstelle existiert...

CVE-2020-1066-EXP

Referenz Diese Schwachstelle ist eine lokale Rechteausweitung durch beliebigen Dateiaustausch, die dadurch verursacht wird, dass der Windows CardSpace-Dienst Symlink-Objekte nicht ordnungsgemäß behandelt. Erklärung Der Autor stellt den PoC ausschließlich zu Forschungszwecken bereit. Wenn Leser...

CVE-2024-10449-patch

Patch für CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Schritte: Laden Sie die gepatchte loginAction.php-Datei aus diesem Repository herunter https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php und ersetzen Sie die angreifbare Version...

dirtycow-replacer

POR FAVOR, OBSERVE QUE NÃO ESTOU TESTANDO FORMALMENTE ESTE CÓDIGO ELE ESTÁ SENDO PROJETADO COMO UMA FERRAMENTA EDUCACIONAL O que faz? android-dirtycow-replacer usa o exploit dirtycow CVE-2016-5195 para corrigir uma lista de mais de 1000 arquivos. Você pode editá-la para 10000, mas 1000 deve ser...

TeleShadow2

TeleShadow 2 Teleshadow2- उन्नत टेलीग्राम डेस्कटॉप सेशन हाईजैकर! डेस्कटॉप टेलीग्राम को चुराना इतना आसान कभी नहीं रहा! ईमेल और प्रेषक तथा प्राप्तकर्ता का विवरण सेट करें या टेलीग्राम API का उपयोग करें! और संकलन के बाद इसे पीड़ित को भेजें। मैं सत्र फ़ाइल का उपयोग कैसे करूं?...

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

EUVD-2026-50946

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

CVE-2026-16727

CVE-2026-16727 describes a race condition in ASUS Armoury Crate caused by Concurrent Execution using a shared resource due to improper synchronization. The vulnerability allows a local user to replace a crafted file and achieve arbitrary code execution with elevated privileges. Affected product: ...

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...

CVE-2026-50148

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a malicious one. Honeywell also recommends...

CVE-2026-13742

CVE-2026-13742 affects Honeywell IQ MultiAccess, all versions prior to and including 28. The root cause is improper digital signature verification, enabling an attacker with local access and low privileges (no user interaction) to have a downloaded file replaced with a malicious one. CVSS metrics...

CVE-2026-44469

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before...