CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Riepilogo esecutivo macOS Music e TV eseguono un rename insicuro che porta a FDA ottenendo il pieno controllo sul TCC.db dell'utente Ho segnalato questo bug in ticket separati per ciascuna app, sentitevi liberi di unirli se applicabile. Il problema di fondo è che queste app hanno FDA ma non...

kali-rpi-luks-crypt

Cifratura completa del disco per Kali su Raspberry o altre architetture simili usando LUKS Questo HOWTO è dedicato all'esecuzione di Kali su Raspberry o altre architetture simili, es. ODROID-C2 usando la cifratura completa del disco con LUKS. Basato sul documento un po' datato qui. Motivazione...

AndroidSecurityEvolution

Evoluzione della Sicurezza di Android Miglioramenti significativi della sicurezza delle principali versioni recenti di Android, a partire da Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 A partire da agosto 2023, gli aggiornamenti di Google Play...

YellowKey-Bitlocker-CVE-2026-45585

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Überprüft CVE-2020-11932 und testet den Host auf die Schwachstelle Verwendung Herunterladen root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Mit curl ohne Download root@kitploit: bash curl ...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

CVE-2025-61229

CVE-2025-61229 Descrição Do blog do desenvolvedor: Scripts shell Before/After definíveis pelo usuário são executados com privilégios elevados, com as permissões de Full Disk Access Acesso Total ao Disco do TCC do SuperDuper. Como esses scripts shell são referenciados pelos arquivos de configuraçõ...

bitlocker-bypass-research

Ricerca sul Bypass di BitLocker Progetto personale di ricerca sulla sicurezza — bypass della crittografia integrale del disco di BitLocker tramite CVE-2023-21563 BitPixie. Di cosa si tratta Ad ottobre 2025 ho effettuato una valutazione fisica di recupero su un laptop aziendale con BitLocker attiv...

CVE-2026-65400-poc

CVE-2026-65400 — Lettura file root pre-autenticazione in macOS Screen Sharing PoC di sola lettura Proof of concept di sola lettura. Dimostra il bypass dell'autenticazione leggendo un file accessibile solo a root da un host vulnerabile. Non scrive nulla sul target: nessun LaunchDaemon, nessun file...

GHSA-WH8P-H9HW-X2MC uutils coreutils has an Unchecked Return Value Issue

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

This Android vulnerability can break your lock screen in under 60 seconds

A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

CVE-2026-0714 (CISA/Red Hat context included) describes a physical-attack vulnerability in certain Moxa industrial computers running Moxa Industrial Linux 3 with TPM-backed LUKS full-disk encryption. The discrete TPM is connected to the CPU over an SPI bus. Exploitation requires invasive physical...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

Moxa Industrial Linux 安全漏洞

Moxa Industrial Linux is an industrial-grade Linux system developed by Moxa Corporation in Taiwan, China. Moxa Industrial Linux has a security vulnerability, which stems from the physical attack vulnerability present in LUKS full-disk encryption supported by TPM. This vulnerability could lead to...