EUVD-2026-64757

A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates...

CVE-2026-66897 Instance template path traversal allows arbitrary host file write as root

A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates...

CVE-2026-66897

A path traversal vulnerability in LXD 's instance template processing allows an attacker with container edit permissions—or any user launching a crafted image—to overwrite arbitrary host files as root , achieving host-level code execution. The root cause is a discrepancy between path validation (...

SeekYou

Supporta lo sviluppo Se questo progetto aiuta il tuo lavoro, supporta la manutenzione continua e le nuove funzionalità. Portafoglio di donazione ETH 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scansiona il codice QR o copia l'indirizzo del portafoglio qui sopra. SeekYou Intelligence host unificata...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

NovaHypervisor

NovaHypervisor Descrizione NovaHypervisor è un hypervisor difensivo basato su host Intel x64. L'obiettivo di questo progetto è proteggere da attacchi a livello kernel tramite Bring Your Own Vulnerable Driver BYOVD o altri mezzi salvaguardando i prodotti di difesa Antivirus / Protezione endpoint e...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

UPnPHostFileRead

Descrizione Exploit PoC per lettura arbitraria di file locale per il servizio Windows UPnP Device Host. Legge un file arbitrario nel contesto di LOCAL SERVICE. Testato su Windows 11 Pro build 26200.8457. Segnalato a Microsoft. Valutato come "non una vulnerabilità". Come compilare 1. Clona il...

CVE-2026-53360-POC

CVE-2026-53360: heap out-of-bounds in PSC di KVM SEV-SNP Proof of concept per una lettura e scrittura heap out-of-bounds nella gestione del Page State Change PSC di KVM SEV-SNP. Un guest SEV-SNP malevolo fa sì che il kernel host percorra un array di voci PSC oltre la fine della sua allocazione...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

CVE-2025-26465

CVE-2025-26465 Il client OpenSSH contiene un errore logico tra le versioni 6.8p1 e 9.9p1 incluse che lo rende vulnerabile a un attacco MitM attivo se l'opzione VerifyHostKeyDNS è abilitata, consentendo a un intruso malintenzionato di impersonare un server legittimo quando un client tenta di...

logitech-ipc-protocol

logitech-ipc-protocol Dokumentation des per Reverse Engineering ermittelten IPC-Protokolls des Logi Options+ Agenten. Ermöglicht die programmatische Steuerung von Logitech-Multi-Host-Geräten Host-Wechsel, Geräteabfragen ohne direkten HID-Zugriff, sowohl unter macOS als auch Windows. Das Protokoll...

bcm4360-wpa3

WPA3-SAE + 802.11w sul Broadcom BCM4360 blob wl chiuso Apple/Broadcom non ha mai dato al BCM4360 14e4:43a0 il WPA3. Il suo unico driver Linux è il blob chiuso broadcom-sta wl; brcmfmac non può pilotarlo. Questo aggiunge WPA3-SAE + 802.11w PMF completo a quel blob chiuso — interamente dal software...

astsu

astsu Funktionsweise Häufige Ports scannen Sendet ein TCP-Syn-Paket an das Ziel auf dem definierten Port. Ist der Port offen, wird mit einem nmap-Scan der auf dem Port laufende Dienst überprüft und alle gefundenen Ports ausgegeben. Hosts im Netzwerk ermitteln Als Basis wird die IP des Routers...

smt878u-ionstack-poc

smt878u-ionstack-poc Prova de conceito de re-root assistido por host, em C puro, para Samsung Galaxy Tab S7 SM-T878U / gts7l contra CVE-2026-43499 IonStack / GhostLock. A cadeia em tempo de execução usa apenas componentes nativos em C/ELF. Ela não requer Python, Java, DEX, appprocess ou uma JVM n...

phantomprint

PHANTOMPRINT Strumento di Analisi Ibrida Passiva per Profilazione e Intelligence Multiprotocollo Indipendente dal Sistema Operativo Riconosci gli host sulla tua rete senza inviare un singolo pacchetto. PHANTOMPRINT correla multipli segnali passivi stack TCP/IP, TLS/JA4, DHCP Option 55, HTTP/2...

kernel-debug-lab-for-virtual-box

So richtest du ein VirtualBox-Labor ein, um Kernel-Treiber mit Windbg zu debuggen Wir gehen hier davon aus, dass auf Computer A windbg bereits installiert ist und auf Computer B Visual Studio, das SDK und das WDK installiert sind. 1. Öffne den Host-Netzwerkmanager, um einen neuen...

webcvescanner

shitsniffer Erstellt eine Liste von Citrix Appliances in einem Land/Bundesstaat-Paar und prüft, ob sie anfällig für CVE-2019-19781 sind. Ergebnisse werden als JSON ausgegeben, die sich recht gut in einen aussagekräftigen PowerBI-Bericht einbinden lassen. Dies geschieht durch Abfragen von Shodan...

CVE-2026-78061

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78061

CVE-2026-78061 affects vas3k TaxHacker up to version 0.8.2 . The vulnerability is a server-side request forgery (SSRF) in the Email Sync component, specifically in the function buildImapConfig within lib/email-sync/imap-client.ts. An attacker can manipulate the host/port arguments to force the se...