310724 matches found
BlockGuard
🛡️ BlockGuard — 基于进程的文件访问安全代理 BlockGuard 是一款 Windows 数据丢失防护 DLP 代理，可在进程级别拦截并控制文件访问。它确保只有授权进程 （通过可执行文件路径、加密哈希、验证码签名和完整性级别识别）才能读取受保护文件。所有其他进程默认通过 NTFS ACL 在操作系统内核级别被拒绝访问 。 📑 目录 功能特性 架构 UI 管理界面 先决条件 快速开始 配置 运行代理 验证运行效果 项目结构 工作原理 故障排除 安全考量 贡献 ✨ 功能特性 🏗️ 架构 BlockGuard 采用三层模块化架构 ：...
EXPLOIT-CVE-2021-44228
CVE-2021-44228 — Log4Shell PoC 实验室 免责声明 本实验室 仅用于教育及安全研究目的 。 所有流量均发生在隔离的 Docker 网络内部。 请勿将此材料用于真实系统或未经明确授权的场景。 不当使用可能构成犯罪。请负责任地使用。 CVE-2021-44228 是什么？ Log4Shell 是一个于 2021 年 12 月被发现的关键漏洞（CVSS 10.0），存在于广泛用于 Java 应用程序的 Apache Log4j 2 日志库中。 漏洞成因 Log4j 具有表达式插值功能：在记录消息时，它会解析 $... 格式的字符串。例如，$java:version...
log4j2-CVE-2021-45046
Log4j2 漏洞示例应用（CVE-2021-45046） 受影响版本：从 2.0-beta9 到 2.15.0 的所有版本 此应用程序基于存在 CVE-2021-45046 漏洞的 Spring Boot Web 应用。 它使用 Log4j 2.14.1（通过 spring-boot-starter-log4j2 2.6.1）。 运行应用程序 运行它： root@kitploit: Import the project in Java IDE as a maven project Run CVEMainApplication.java as a spring boot app...
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lyin...
CVE-2022-42889
🚀 CVE-2022-42889 Text4Shell 利用工具 一个针对 CVE-2022-42889 Text4Shell 的 Python 利用工具，该漏洞是 Apache Commons Text 1.10.0 之前版本中的一个严重远程代码执行漏洞。 📋 目录 描述 漏洞详情 受影响版本 利用工具特性 环境要求 使用方法 示例 工作原理 检测 缓解措施 参考资料 免责声明 📝 描述 该工具针对 CVE-2022-42889 Text4Shell 漏洞，这是 Apache Commons Text 中的一个漏洞，允许通过经 StringLookup 插值器处理的特制输入字符串实现...
CVE-2024-36401
CVE-2024-36401 GeoServer 漏洞利用工具 漏洞简介 CVE-2024-36401 是 GeoServer 中的一个远程命令执行漏洞，攻击者可以通过构造特定的 WFS Web Feature Service 请求，在未授权的情况下执行任意命令。 环境要求 Python 3.x 安装必要依赖：pip install requests 使用方法 该工具支持两种使用模式：cmd 模式（直接执行命令）和 reverse 模式（建立反弹Shell）。 1. 测试目标是否出网 假设VPS地址为 111.46.112.85， 使用 cmd 模式执行 curl...
resterm v1.8.1
Resterm An API-as-code workbench for the terminal. Trace and timeline view Resterm is an API client that stores requests in plain .http and .rest files that can live side by side in your repo like the rest of your code. You can use the terminal UI, or run the same files in CI with resterm run...
w1f1t3kAl1
Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...
DEBIAN-CVE-2026-93194
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Release core resources Core resources such as the DisplayPort AUX channel get initialized and registered during dwdpbind, but are never unregistered, which may lead to memory leaks and/or use-after-free:...
CVE-2026-93194
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Release core resources Core resources such as the DisplayPort AUX channel get initialized and registered during dwdpbind, but are never unregistered, which may lead to memory leaks and/or use-after-free:...
HTB-Silentium-Writeup
HTB - Writeup de Silentium Información de la Máquina Nombre: Silentium SO: Linux Dificultad: Fácil CVEs: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Enumeración Escaneo con Nmap root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Puertos abiertos: 22 SSH, 80 HTTP Hosts...
DEBIAN-CVE-2026-93096
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...
CVE-2026-93096
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...
DEBIAN-CVE-2026-93079
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Get Feature count larger than the output buffer cxlctlgetfeature sizes its output buffer from the user's fwctlrpc.outlen, but the device is told to write cxlmboxgetfeatin.count bytes into rpcout-payload, whic...
DEBIAN-CVE-2026-93077
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature output size to the remaining buffer cxlgetfeature reads a feature in a loop but passes a fixed sizeout as the output capacity every iteration. On the last partial iteration the buffer has less room...
CVE-2026-93077
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature output size to the remaining buffer cxlgetfeature reads a feature in a loop but passes a fixed sizeout as the output capacity every iteration. On the last partial iteration the buffer has less room...
CVE-2026-93079
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Get Feature count larger than the output buffer cxlctlgetfeature sizes its output buffer from the user's fwctlrpc.outlen, but the device is told to write cxlmboxgetfeatin.count bytes into rpcout-payload, whic...
CVE-2026-93079
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Get Feature count larger than the output buffer cxlctlgetfeature sizes its output buffer from the user's fwctlrpc.outlen, but the device is told to write cxlmboxgetfeatin.count bytes into rpcout-payload, whic...
UBUNTU-CVE-2026-93194
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Release core resources Core resources such as the DisplayPort AUX channel get initialized and registered during dwdpbind, but are never unregistered, which may lead to memory leaks and/or use-after-free:...
UBUNTU-CVE-2026-93077
In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature output size to the remaining buffer cxlgetfeature reads a feature in a loop but passes a fixed sizeout as the output capacity every iteration. On the last partial iteration the buffer has less room...