Netryx-OpenSource-Next-Gen-Street-Level-Geolocation

NETRYX オープンソースのストリートレベル位置特定エンジン 任意のストリート写真をアップロードすれば、正確なGPS座標を取得できます。 精度50m未満。ランドマーク不要。完全にあなたのハードウェア上で動作します。 デモ · 仕組み · 始め方 · 使用方法 · FAQ このバージョンは古いです。代わりにこちらを使用してください 新しいリポジトリ Netryxとは？...

inception

注意：此工具已不再活跃开发，请查看 PCILeech 代替。 INCEPTION Inception 是一款利用基于 PCI 的 DMA 进行物理内存操控和黑客攻击的工具。该工具可通过 FireWire、Thunderbolt、ExpressCard、PC Card 以及任何其他 PCI/PCIe 硬件接口进行攻击。 Inception 旨在提供一种 相对 快速、稳定、简单且可扩展的方式，通过 DMA 对运行中的计算机执行侵入性和非侵入性内存攻击。 工作原理 Inception 的模块工作原理如下：通过向受害者机器呈现一个序列总线协议 2（SBP-2）单元目录（通过 IEEE1394...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

CVE-2024-34102

CVE-2024-34102 ★ 元のコードベースについて @th3gokul、Sanjaith3hacker、Chocapikk に感謝します。 ★ 説明 CVE-2024-34102 : Adobe Commerce の XXE 脆弱性 説明: Adobe Commerce 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 およびそれ以前のバージョンは、XML外部エンティティ参照（'XXE'）の不適切な制限の脆弱性の影響を受け、任意のコード実行が発生する可能性があります。攻撃者は、外部エンティティを参照する細工された XML...

octohook

octohook 用于 C2 的 Git Web Hook 隧道 安装 root@kitploit: apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook root@kitploit: pip install...

wmiexec-Pro

wmiexec-Pro 新一代的 wmiexec.py。 目录 1. 简介 2. 特别感谢 3. 功能特性 4. 快速开始 安装 5. 使用方法 6. 截图 7. 工作原理 8. 免责声明 9. 参考资料 简介 新一代的 wmiexec.py，拥有更多新功能，所有操作仅需使用 135 端口（无需 SMB 连接），用于横向移动中的 AV 规避（Windows Defender、HuoRong、360） 回到顶部 特别感谢 @422926799 回到顶部 功能特性 主要功能：AV 规避 主要功能：无需 win32process 主要功能：仅需 135 端口。 新模块：AMSI 绕过...

osv-scanner

使用 OSV-Scanner 查找影响项目依赖项的现有漏洞。 OSV-Scanner 为 OSV 数据库提供官方支持的前端，并为 OSV-Scalibr 提供 CLI 接口，可将项目的依赖项列表与影响它们的漏洞关联起来。 OSV-Scanner 支持多种项目类型、包管理器和功能，包括但不限于： 语言： C/C++, Dart, Elixir, Go, Java, Javascript, PHP, Python, R, Ruby, Rust。 包管理器： npm, pip, yarn, maven, go modules, cargo, gem, composer, nuget 等。...

Security Bulletin: Vulnerable Version of Software in Use

Summary Vulnerable Version of Software in Use: Prior versions include vulnerable version of curl. Vulnerability Details CVEID:CVE-2026-3805 DESCRIPTION: When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. CWE:CWE-416: U...

NinjaDroid

NinjaDroid NinjaDroidは、Android APKパッケージのリバースエンジニアリングを行うためのシンプルなツールです。 公開場所: https://snapcraft.io/ninjadroidshell $ snap install ninjadroid --channel=beta root@kitploit: 概要 NinjaDroidは AXMLParser と、aapt、keytool、string などに基づく一連のPythonスクリプトを組み合わせて、与えられたAPKパッケージから以下のようなさまざまな情報を抽出します。 -...

CVE-2026-92599 Joi before 17.13.7 and 18.2.6 ReDoS via isoDate

joi npm package joi, hapi.js versions =17.2.0 =18.0.0 18.2.6 are vulnerable to regular expression denial of service in the Joi.string.isoDate validation rule. One of the regular expressions the rule applies to the input is unanchored, so a valid ISO date followed by a long run of fractional-secon...

CVE-2026-92599

joi (npm package, hapi.js) versions >=17.2.0 =18.0.0

CVE-2026-92595

Nodemailer (npm package nodemailer) versions 9.1.0 and earlier fail to honor the disableFileAccess and disableUrlAccess sandbox options when message content is resolved via the public plugin API MailMessage.resolveContent() using the legacy three-argument signature. The root cause is that shared....

CVE-2026-92595 Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContent

Nodemailer npm package nodemailer versions 9.1.0 and earlier do not honor the disableFileAccess and disableUrlAccess sandbox options when message content is resolved through the public plugin API MailMessage.resolveContent using the documented legacy three-argument signature resolveContentdata,...

CVE-2026-92592

Craft CMS 4.8.0–4.18.5 and 5.0.0–5.10.12 are affected by a remote code execution vulnerability (CVSS 3.1 score 8.8 High ). The root cause is that the HMAC signature for the license-shun cookie is not bound to its purpose—Yii's cookieValidationKey derives from the same Craft securityKey used for s...

CVE-2026-92592 Craft CMS before 4.18.6 Remote Code Execution via signed cookie

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...

CVE-2026-92590 Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fields

Craft CMS versions from 5.7.0 before 5.10.13 contain a stored cross-site scripting vulnerability in the Generated Fields feature that disables Twig autoescaping and fails to encode cached values. Content editors can inject malicious JavaScript through editable fields that executes in authenticate...

CVE-2026-92590

Craft CMS versions 5.7.0 through 5.10.12 are affected by a stored cross-site scripting (XSS) vulnerability in the Generated Fields feature. The root cause is the disabling of Twig autoescaping combined with a failure to encode cached values , allowing content editors to inject malicious JavaScrip...

CVE-2026-92589 Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reorder

Craft CMS 5.0.0 through 5.10.12 fixed in 5.10.13 contains a broken access control flaw in the nested-elements reorder endpoint. When an authenticated control panel user with viewEntries and viewPeerEntries but without savePeerEntries opens another author's entry in read-only mode, Craft...

CVE-2026-92589

Craft CMS versions 5.0.0 through 5.10.12 contain a broken access control flaw in the actions/nested-elements/reorder endpoint. Unlike the corresponding delete endpoint, this endpoint trusts the manageNestedElements::::field: session flag alone and never rechecks the caller's savePeerEntries permi...

CVE-2026-92588 n8n before 1.123.76 Improper Authorization via Source Control Push

n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2, the source control push endpoint derived the set of files to push from the file paths and status supplied in the client request payload instead of from the server-side status computed for the requesting...