CVE-2026-13478 Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

BIT-KEYCLOAK-2026-9083 Keycloak: keycloak: information disclosure through arbitrary filesystem path probing

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths, determining...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW Una POC per CVE-2024-32002 che dimostra la scrittura arbitraria nella directory .git. Vedi cve-2024-32002-submodule-aw per il repository del sottomodulo correlato. Cosa contiene questo repo Un symlink con un nome arbitrario che punta alla directory .git. Un file .gitmodules...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

Network-Filesystem-Forensics

Forense de Rede e Sistema de Arquivos Relatórios sobre pós-exploração em honeypot explorando wu-ftpd vulnerável CVE-2001-0550...

CVE-2025-30208

🔥 Scanner per vulnerabilità di lettura arbitraria di file CVE-2025-30208 per Vite Scanner avanzato per CVE-2025-30208 con funzionalità di livello enterprise Strumento professionale di penetration testing per il rilevamento della vulnerabilità di lettura arbitraria di file in Vite 🚀 Avvio rapido •...

CVE-2026-13215

The Zephyr RTOS ext2 filesystem driver fails to bounds-check the s_log_block_size field in ext2_verify_disk_superblock() (subsys/fs/ext2/ext2_impl.c). A crafted value causes the computed block size (1024 <

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

CVE-2026-71557-poc

CVE-2026-71557: go-git reference name path traversal PoC English version Übersicht Dieses Repository ist ein sicherer lokaler PoC für CVE-2026-71557 auf Grundlage des öffentlichen Advisories von go-git GHSA-qgq7-7hm3-q39j. Das nicht korrigierte storage/filesystem validierte die Namen von Loose...

CVE-2023-0386-go-poc

PoC in Go di CVE-2023-0386 ./main /tmp/fuse Esegue il programma e crea un mount fuse sulla directory "/tmp/fuse". Presuppone che tu abbia compilato la shell nella directory root con il nome "shell" di default. Dopo aver eseguito il programma, dovrebbe esserci un binario eseguibile nella directory...

AgentGuard

AgentGuard Sandbox a fiducia zero per agenti AI autonomi. AgentGuard avvolge qualsiasi agente AI LangChain, CrewAI, AutoGen, script personalizzati con binari di sicurezza. Con un solo cambiamento di comando: root@kitploit: Before dangerous — agent has full system access python myagent.py After...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

DEBIAN-CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

tscopy

TScopy Updated 2022-03-31 Introducing TScopy It is a requirement during an Incident Response IR engagement to have the ability to analyze files on the filesystem. Sometimes these files are locked by the operating system OS because they are in use, which is particularly frustrating with event logs...

log4j-filescan

████████████████▀███████████████████████████████████████████████████████████████████ █▄─▄███─▄▄─█─▄▄▄▄█░█░████▄─▄█▀▀▀▀▀██▄─▄▄─█▄─▄█▄─▄███▄─▄▄─█─▄▄▄▄█─▄▄▄─██▀▄─██▄─▀█▄─▄█ ██─██▀█─██─█─██▄─█▄▄░██─▄█─██████████─▄████─███─██▀██─▄█▀█▄▄▄▄─█─███▀██─▀─███─█▄▀─██...

Vulnerable-Docker-Engine

CVE-2021-41091 Questo exploit offre un'analisi approfondita della vulnerabilità di sicurezza CVE-2021-41091 e fornisce una guida passo-passo su come utilizzare lo script di exploit per ottenere un'escalation dei privilegi su un host. Riepilogo della vulnerabilità CVE-2021-41091 è un difetto in Mo...

PT-2026-81835

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a us...