reko

reko - 通用反编译器。 Reko （瑞典语：“体面的、乐于助人的”）是一款针对机器码二进制文件的反编译器。 本项目基于 GNU 通用公共许可证自由提供。 项目由前端、核心反编译器引擎和后端组成，以实现其目标。目前已有命令行、Windows GUI 和 ASP.NET 前端。反编译器引擎从前端接收输入，输入可以是单个可执行文件或反编译器项目文件。Reko 项目文件包含关于二进制文件的额外信息，有助于反编译过程或输出格式化。反编译器引擎随后开始分析输入二进制文件。 已加载的 ARM 二进制可执行文件的字节映射视图 | 已加载的 ARM 二进制可执行文件的反编译视图 ---|--- Re...

mtr

什么是MTR？ mtr 将 'traceroute' 和 'ping' 程序的功能结合在一个网络诊断工具中。 当 mtr 启动时，它会调查运行 mtr 的主机与用户指定的目标主机之间的网络连接。它向目标发送生存时间（TTL）值逐渐增大的探测包，并利用中间路由器的响应来发现和测量路径。在此过程中，它会为每一跳打印运行统计信息。 中间路由器可能被配置为从不发送这些 ICMP 响应，或者可能对其进行速率限制，因此中间跳的明显丢失并不总是意味着转发流量在该点丢失。 mtr 根据 GNU 通用公共许可证第 2 版发布。详情请参阅 COPYING 文件。 安装 如果你从 tarball 构建，编译...

openstego

OpenStego OpenStego 是一款隐写术应用程序，提供两种功能： 1. 数据隐藏：可以将任何数据隐藏在图像文件中。 2. 水印：使用不可见签名对图像文件进行水印处理。可用于检测未经授权的文件复制。 使用 图形界面： 如果使用安装程序，请使用 OpenStego 的菜单快捷方式。对于 zip 下载，请使用附带的批处理文件或 shell 脚本启动图形界面。 root@kitploit: openstego.bat Windows root@kitploit: ./openstego.sh Linux / MacOS 命令行界面： 请参考在线文档。 开发 Fork...

CVE-2023-47127

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the...

FreeBSD : typo3-{11,12} -- multiple vulnerabilities (1ad3d264-e36b-11ee-9c27-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1ad3d264-e36b-11ee-9c27-40b034429ecf advisory. - In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrat...

BIT-TYPO3-2021-32768

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing to properly parse, sanitize and encode malicious rich-text content, the content rendering process in the website frontend is vulnerable to cross-site scripting. Corresponding...

BIT-TYPO3-2021-41113

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as...

BIT-TYPO3-2021-41114

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example, to generate absolute URLs during the...

BIT-TYPO3-2022-36104

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as an error message from another page. This leads t...

BIT-TYPO3-2022-36106

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a password reset link for TYPO3 backend users has never been evaluated. As a result, a password reset link could be used to perform a password reset even ...

BIT-TYPO3-2022-36107

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the FileDumpController backend and frontend context is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account i...

BIT-TYPO3-2023-47126

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only...

CVE-2024-25118

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this...

Design/Logic Flaw

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific t3:// URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records although only if a valid link-handling...

CVE-2024-25118 Information Disclosure of Hashed Passwords in TYPO3 Backend Forms

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this...

CVE-2024-25119 Information Disclosure of Encryption Key in TYPO3 Install Tool

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of $GLOBALS'SYS''encryptionKey' was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes...

CVE-2024-25119 Information Disclosure of Encryption Key in TYPO3 Install Tool

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of $GLOBALS'SYS''encryptionKey' was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes...

CVE-2024-25120

CVE-2024-25120 affects TYPO3 and concerns improper access control of resources referenced by the t3:// URI scheme. The vulnerability could allow a backend authenticated user to access resources outside the user’s permission scope (files, folders, pages, records) via t3:// link handling. Affected ...

CVE-2024-25120 Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific t3:// URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records although only if a valid link-handling...

CVE-2024-25120 Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific t3:// URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records although only if a valid link-handling...