Tater

Tater Taterは、Hot Potato Windows権限昇格エクスプロイトのPowerShell実装です。 クレジット すべての功績は@breenmachine、@foxglovesec、Google Project Zero、そしてこのエクスプロイトの詳細を解決するのに貢献した他のすべての人々に帰属します。 Potato - https://github.com/foxglovesec/Potato 含まれているもの p0wnedShell - https://github.com/Cn33liz/p0wnedShell PowerShell Empire -...

linux-fingerprint-r503

linux-fingerprint-r503 — inicio de sesión con huella digital para Linux usando un Grow R503 + Arduino Un lector USB de huellas dactilares para escritorios Linux construido a partir de componentes. Coste total de las piezas inferior a 15 $. Sustituto directo del fprintd oficial: PAM, Ajustes de KD...

pingap

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...

CVE-2018-11788

概述 Apache Karaf 是一个现代且多态的应用容器。它是一个由 OSGi 提供支持的轻量级、功能强大且企业就绪的容器。Apache Karaf 是一个"产品项目"，提供完整且开箱即用的运行时。该运行时是"多面"的，这意味着你可以部署不同类型的应用：OSGi 或非 OSGi、Web 应用、基于服务的应用等。 在最近对 Apache Karaf 的研究中，我发现在其 XML 解析器上存在一些 XXE（XML 外部实体注入）漏洞。该问题是由于解析器未正确解析 XML 文档所致。 受影响版本 Apache Karaf ... ... ... 为了了解部署器如何处理 XML 文件，我查看了...

text4shell-tools

commons-text-tools 快速链接 点击查找： 查找 commons-text .jar 文件及其版本 对 commons-text 漏洞函数的调用 对 commons-text .jar 文件进行热补丁以禁用危险行为 扫描与修补示例 概述 CVE-2022-42889 可能对广泛的基于 Java 的应用程序构成严重威胁。开发人员在此时可能会提出的重要问题包括： 1. 我的代码是否包含 commons-text？是哪些版本？ 发布的代码是否包含 commons-text？其中包含哪个版本的库？由于两个因素，回答这些问题可能并不直接： 1. 传递性依赖：虽然...

hot-jar-swapping-urlclassloader

URLClassLoader JAR 热替换 以下示例代码展示了热替换已加载 JAR 文件并实现代码执行的能力，其利用的事实是：只要 inode 不变，内部类在被调用时仍会访问该 JAR 文件。 已在 MacOS 上使用 OpenJDK 测试通过（并且还曾通过 Transporter 在 Apple 的 Author publisher 上完成了利用）。 演示来自 Frans Rosén 在 NahamCon 2022 EU 上的演讲《通过热 JAR 替换在 Apple 上实现 RCE 的故事》。 如何运行 build-and-run.sh 运行方式： ./build-and-run.s...

cve-2021-44228-qingteng-patch

青藤 log4j2-patch https://github.com/qingtengyun/cve-2021-44228-qingteng-patch 修复 log4j2的 CVE-2021-44228 , 利用 JVM 提供的 Instrumentation API来更改加载到 JVM 中的现有字节码。 在不重启Java进程的情况下，修改org.apache.logging.log4j.core.lookup.JndiLookup类的lookup方法，固定返回 Patched JndiLookup::lookup。 简单参考了...

Log4jPatch

-- 此仓库已被归档 -- 该工具的后续开发将继续在 corretto/hotpatch-for-apache-log4j2 进行。 感谢大家的分享、评论、试用以及对本项目的贡献！ Log4jPatch 这是一个简单工具的POC，用于向正在运行的JVM进程注入一个Java agent。该agent会修补所有已加载的 org.apache.logging.log4j.core.lookup.JndiLookup 实例中的 lookup 方法，使其无条件返回字符串 "Patched JndiLookup::lookup"。这应该在无需重启Java进程的情况下修复 Log4j 中的...

Rail-OT-Protector

⚠️ 仓库已归档 本仓库已归档 ，不再维护。 所有开发工作已迁移至统一的 ICS OT Protector 单体仓库： https://github.com/spinfosecurity/ics-ot-protector 该扫描器的位置 原仓库| 新位置 ---|--- Energy-Grid-Protector| scanners/energy-grid/ BAS-Guardian| scanners/bas/ Rail-OT-Protector| scanners/rail/ water-utility-protector| scanners/water/...

cve-2021-44228-qingteng-online-patch

cve-2021-44228-qingteng-online-patch 这是什么 通过利用漏洞本身热修补CVE-2021-44228。 如何使用 将以下代码注入到可能受CVE-2021-44228影响的任何位置， $jndi:ldap://your-own-server/patch 为防止修补过程中的中间人攻击（MITM），建议使用以下payload，但对于旧版Java兼容性较差， $jndi:ldap://your-own-server/anystringexceptpatch 运行你自己的服务器 1. 下载最新的发行版 2...

Insertion of Sensitive Information into Log File

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the OpenAI-compatible transport layer, when a pinned third-party provider session whose resolved model metadata lacks a concrete base...

CVE-2026-100528

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CVE-2026-100539

The OpenClaw (npm package 'openclaw ') before version 2026.8.1 contains a memory access control bypass. The vulnerability occurs because the execution-time resolver treats explicit disablement of memory configurations as an unavailable snapshot, causing the memory_search and memory_get tool insta...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

EUVD-2026-87522

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CVE-2026-100528

The OpenClaw npm package (openclaw ) versions prior to 2026.8.1 are vulnerable to a credential disclosure flaw. When using a third-party provider with an OpenAI-compatible API that lacks a concrete base URL in its metadata, a pinned session following a model configuration hot reload may retain th...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

PT-2026-99165

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description When a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a model configuration hot reload retains...