unicorn_pe

Unicorn PE Unicorn PE は、unicorn ベースの計測プロジェクト/フレームワークであり、Windows PE ファイル、特にパックされたファイルのコード実行をエミュレートするために設計されています。 このプロジェクトはアーカイブされ、もはやメンテナンスされていません。後継として sogen が推奨されます。 機能 エミュレーションメモリから PE イメージをファイルにダンプし、インポートテーブルを修正し、VMProtect の文字列を復号し、VMProtect のインポートを復号します。 例外の部分的なサポート。DB と BP のみ...

CVE-2026-87910

A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

CVE-2026-88932

A flaw was found in multer, a Node.js middleware for handling multipart/form-data uploads. When a request using disk storage is aborted during an upload, file writes that complete after multer's cleanup process are not removed. This can leave orphaned files on disk. A remote unauthenticated...

CVE-2026-88932 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

EUVD-2026-77332

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

CVE-2026-90691

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

EUVD-2026-77244

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

CVE-2026-90691 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

CVE-2026-90691

0x4m4 HexStrike AI is affected by a path traversal vulnerability in the FileOperationsManager function within hexstrike_server.py (component: API Files Endpoint). Manipulating the filename argument allows a remote, unauthenticated attacker to traverse file paths, with CVSS 3.1 score 8.3 (HIGH) du...

miniplasma-advisory

MiniPlasma - 脆弱性保護アドバイザリ Windows Cloud Files ミニ フィルター ドライバー cldflt.sys に影響を及ぼす CVE-2020-17103 の MiniPlasma 亜種に対する技術的緩和アドバイザリ。 著者: Rafael França - Microsoft Cybersecurity Architect CSA、Customer Success Unit CSU 保護アドバイザリのダウンロード PDF...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - 범용 PDF.js 취약점 스캐너 ⚠️ 중요 보안 도구 | CVE-2024-4367CVSS 9.8 - PDF.js 원격 코드 실행RCE 취약점 탐지 모든 웹사이트에서 작동 - 별도 설정 불필요 📋 목차 📖 개요 ⚡ 빠른 시작 🔍 탐지 기능 🛠️ 작동 방식 📊 출력 예시 🔒 해결 가이드 🎯 공격 벡터 🧪 테스트 지침 📝 기술 세부사항 ⚠️ 법적 고지 📚 참고 자료 📖 개요 CVE-2024-4367 은 PDF.js4.2.67 미만 버전의 치명적인 취약점 으로, 악성 PDF 파일을 통해 임의...

PT-2026-91122

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

UBUNTU-CVE-2026-57225

datasets: NULL dereference on unexpected ndjson files...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib 임의 파일 쓰기 → RCE fontTools.varLib의 임의 파일 쓰기 + XML 인젝션 취약점에 대한 PoC 익스플로잇 HackTheBox — VarIaType에서 테스트 완료 취약점 fontTools.varLib는 가변 글꼴을 빌드하기 위해 .designspace XML 파일을 처리합니다. 두 가지 약점이 결합되어 인증 없이 RCE를 달성합니다...

collisions

TL;DR この2つの画像のMD5コリジョンは、今や 簡単かつ瞬時に実現できます。 ⟷ 火遊びはするな。MD5を当てにするな。 任意のファイルペアのコリジョンは何年も前から可能でしたが、毎回数時間かかり、近道もありませんでした。 このページでは、ファイル形式固有のトリックと事前計算されたコリジョンプレフィックスを利用して、コリジョンを瞬時 に行えるようにします。 git clone を実行。スクリプトを実行。完了。 ハッシュコリジョンと悪用 著者: Ange Albertini と Marc Stevens。 はじめに 現状 攻撃 同一プレフィックス FastColl MD5 UniCo...

dirtycaw-projet

Dirty COW - 권한 상승 CVE-2016-5195 이 프로젝트는 Ubuntu Server 16.04.1과 커널 4.4.0-31-generic을 실행하는 가상 머신에서 Dirty COW 취약점을 이용한 권한 상승을 시연합니다. 🔧 환경 피해 머신 : 취약한 Ubuntu 16.04.1 student, 권한 없음 공격 머신 : Docker가 설치된 Kali Linux 🐮 취약점 Dirty COWCVE-2016-5195는 Linux 커널의 메모리 하위 시스템에서 발생하는 경쟁 조건race condition입니다. 권한이 없는...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

CVE-2024-4577

CVE-2024-4577 환경 구축 파일 및 PHP파일 --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

CoffeeLdr

CoffeeLdr CoffeeLdr は、いわゆる Beacon Object Files 用のローダーです。 このプロジェクトは、Cobalt Strike フレームワークを使わずに Beacon Object Files をテストするために使用できるほか、 Cobalt Strike 向けに設計された BOF を実行する手段をカスタムインプラントに提供するためにも使用できます。 ただし、Beacon API の関数（fork&run およびインジェクション）のほとんどは、カスタム実装用に空になっています。 やること x86 オブジェクトファイルのサポート クレジット...