SetupHijack

SetupHijack Aperçu SetupHijack est un outil de recherche en sécurité qui exploite des conditions de concurrence et une gestion non sécurisée des fichiers dans les processus d'installation et de mise à jour de Windows. Il cible les scénarios où des installateurs ou programmes de mise à jour...

dirtycow-replacer

VEUILLEZ NOTER QUE JE NE TESTE PAS FORMELLEMENT CE CODE IL EST CONÇU COMME UN OUTIL ÉDUCATIF À quoi ça sert ? android-dirtycow-replacer utilise l'exploit dirtycow CVE-2016-5195 pour patcher une liste de plus de 1000 fichiers. Vous pouvez la modifier pour qu'elle en contienne 10000 mais 1000 devra...

o365-attack-toolkit

ما هو o365-attack-toolkit يتيح o365-attack-toolkit للمشغلين تنفيذ هجمات تصيد OAuth. قررنا الانتقال من النموذج القديم للتعريفات الثابتة إلى نموذج "تفاعلي" بالكامل مع الحساب في الوقت الفعلي. بعض التغييرات البحث التفاعلي عن البريد الإلكتروني - يسمح لك بالبحث في رسائل البريد الإلكتروني للمستخدم كما ل...

TeleShadow2

TeleShadow 2 Teleshadow2- أداة متقدمة لاختراق جلسات تيليجرام سطح المكتب! لم يكن سرقة تيليجرام سطح المكتب بهذه السهولة من قبل! قم بتعيين تفاصيل البريد الإلكتروني والمرسل والمستقبل أو استخدم واجهة برمجة تطبيقات تيليجرام! وأرسلها إلى الضحية بعد التجميع. كيف أستعمل ملف الجلسة؟ احذف كل شيء داخل المجلد...

CVE-2017-4490-

CVE-2017-4490 J'ai fait quelques expériences, j'ai réussi à exploiter le fichier .basgrc Spécialiste de l'écriture et de la décoration sur terminal J'ai créé une vulnérabilité dans le fichier .bashrc Et j'ai réussi à entraver le terminal La vulnérabilité existe chez moi Fonctionne sur tous les...

CVE-2020-1066-EXP

Citation Cette vulnérabilité est une élévation de privilèges locale par remplacement arbitraire de fichiers, due à une gestion incorrecte des objets de lien symbolique par le service Windows CardSpace. Déclaration Le PoC de l'auteur est fourni à des fins de recherche uniquement. Si le lecteur...

EUVD-2026-95822

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

Summary When no system-installed liblz4-java is found, net.jpountz.util.Native.load extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive...

GHSA-MCR4-QMVW-PX4G yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

Summary When no system-installed liblz4-java is found, net.jpountz.util.Native.load extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive...

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

When no system-installed liblz4-java is found, net.jpountz.util.Native.load extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive creation...

CVE-2026-106451 yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-106451 yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-106451

The yawkat LZ4 Java library (versions 1.7.0 through 1.11.4 ) is vulnerable to a TOCTOU race condition during native library extraction. The net.jpountz.util.Native.load() function creates a temporary .lck file but uses a predictable path for the actual native library. Because FileOutputStream ope...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Installation TrollStore AltStore Crédits https://github.com/zhuowei/MacDirtyCow exploit MacDirtyCow https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Justification Alyssa Milburn https://twitter.com/noopwafel a découvert un bug de condition de compétition TOCTOU dans sudo lorsque le paramètre DigestSpec est utilisé. Le paramètre DigestSpec peut être utilisé pour permettre à un utilisateur d'exécuter sudo sur un...

CVE-2024-10449-patch

Correctif pour CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Étapes : Téléchargez le fichier loginAction.php corrigé depuis ce dépôt https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php et remplacez la version vulnérable par celui-ci...

CVE-2026-97024

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

CVE-2026-91813

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation . This race condition could enable local attackers to execu...

CVE-2026-92763 Rundeck through 6.2.1 Authorization Bypass via Project Import

Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...

CVE-2026-92763

Rundeck through 6.2.1 contains an authorization bypass in the project archive import endpoint. The importConfig and importNodesSources parameters are not properly authorized, allowing an attacker with only the import action to replace project configuration files, including security-relevant setti...