Metadata-Attacker

Metadata-Attacker With this small suite of open source pentesting tools you're able to create an image .jpg, audio .mp3 or video .mp4 file containing your custom metadata or a set of cross-site scripting vectors to test any webservice against possible XSS vulnerabilities when displaying unfiltere...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

EUVD-2026-78134

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to access restricted files...

EUVD-2026-78110

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

CVE-2026-86886

A path traversal vulnerability in Apple's mobile operating systems allowed a malicious app to modify protected system files . The issue was addressed with improved input validation and is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , and watchOS 27 . No publicly available exploitation de...

EUVD-2026-78015

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-77999

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-77994

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-84624

CVE-2026-84624 is a permissions issue in Apple's operating systems that was addressed with improved path validation . The vulnerability allows a sandboxed app to potentially access restricted files , representing a break in the sandbox isolation boundary. The issue is fixed in iOS 26.7 and iPadOS...

CVE-2025-24071-PoC

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Proof of Concept Overview CVE-2025-24071 is a spoofing vulnerability in Windows File Explorer that allows an unauthenticated attacker to expose sensitive information over a network. The vulnerability arises due to the implicit trust an...

CVE-2019-19653

CVE-2019-19653 Chevereto information disclosure = 3.13.5 Core. Log files for the bulk importer are available for anyone to see and are easily enumerated root@kitploit: /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...

dex2jar

dex2jar 프로젝트가GitHub로 이전되었습니다 | 미러| 위키| 다운로드| 이슈 ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Releases| Issues sf| https://sourceforge.net/p/dex2jar| old| old| old bb| https://bitbucket.org/pxb1988/dex2jar| old| old| old gc| https://code.google.com/p/dex2jar| old| old| old...

CVE-2021-28079

CVE-2021-28079 - POC Jamovi file example.omv example.omv: Zip archive data, at least v2.0 to extract All OMV files are archived data. So, you can extract it and modify to exploit the XSS bug. root@kitploit: 🔥\ unzip example.omv Archive: example.omv inflating: META-INF/MANIFEST.MF inflating:...

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 概述 R1Soft Server Backup Manager 使用 ZK 框架作为主要框架。其安全性要求所有 Web3 项目方更加关注各类 Web3 基础设施的安全漏洞，并及时打补丁，以避免潜在的安全风险和数字资产损失。我们将及时挖掘、追踪 Web3 上的各种安全风险，并提供领先的安全解决方案，确保 Web3 世界链上和链下的安全。 前言 ZK 是构建企业级 Web 应用的领先开源 Java Web 框架。下载量超过 200 万次，ZK 赋能了从中小企业到财富全球 500 强等多个行业的各类公司和机构。 R1Soft Server Backup Manag...

MiniPlasma-Runner

MiniPlasma-Runner Nightmare-Eclipse/MiniPlasma CVE-2020-17103의 수정 버전으로, C2 사용에 맞게 조정되었습니다. 원래 PoC는 디스크에서만 실행됩니다. 이 버전은 execute-assembly를 통해 메모리에서 완전히 실행되며, 이진 파일을 분할하여 탐지를 회피합니다. 면책 조항 이 도구는 승인된 보안 테스트 및 교육 목적으로만 제공됩니다. 명시적인 서면 허가 없이 시스템에 대해 이 도구를 사용하는 것은 불법이며 비윤리적입니다. 저자는 이 도구의 오용 또는 손해에 대해 어떠한...