flare-ida

Reemplazos de Funciones de Code Grafter Acerca de Code Grafter Code Grafter es un script de IDA Python que permite usar el Modo Bochs IDB de IDA Pro para emular código que importa funciones de la API de Windows. Los entornos de emulación como el modo Bochs IDB no resuelven ni emulan funciones...

idb

Idb idb es una herramienta que simplifica algunas tareas comunes en pentesting e investigación de iOS. Originalmente existía una versión de línea de comandos de la herramienta, pero ya no está en desarrollo, por lo que deberías usar la versión GUI. idb tiene una nueva página principal...

CVE-2026-84099 IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099 IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

EUVD-2011-4701

Malware in sbrugna...

Thinking Outside the Bochs: Code Grafting to Unpack Malware in Emulation

This blog post continues the FLARE script series with a discussion of patching IDA Pro database files IDBs to interactively emulate code. While the fastest way to analyze or unpack malware is often to run it, malware won’t always successfully execute in a VM. I use IDA Pro’s Bochs integration in...

fn_fuzzy: Fast Multiple Binary Diffing Triage with IDA

Summary This week at HITBSecConf, Takahiro Haruyama, a Senior Threat Researcher for the CB Threat Analysis Unit TAU, presented his work on fnfuzzy, a tool which aims to help researchers and reverse engineers triage samples quicker. This blog post details the motivation for and current standing of...

CVE-2018-7210: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idb/config?CMD=installLicense URI, as demonstrated by intranet IP addresses and names of guest accounts...

PT-2018-17951

Name of the Vulnerable Software and Affected Versions iDashboards version 9.6b Description An issue allows remote attackers to obtain sensitive information via a direct request for the "idb/config?CMD=installLicense" URI. This can be demonstrated by accessing intranet IP addresses and names of...

IDA SDK 6.9 Demo / IDA 5.0 Freeware DLL Hijacking

Software : Interactive DisAssembler IDA PRO Version: = IDA SDK 6.9 demo IDA 5.0 Freeware Software Link: https://www.hex-rays.com/products/ida/support/download.shtml Tested on: WINDOWS XP SP3 - 32 bit, WINDOWS 7 SP1 - 32 bit, Windows 8.1 32 bit IDA Pro suffers from DLL HIJACK Vulnerability from .i...

IDA Kernel Database TIL Section Parsing Unspecified Issue

The version of IDA Pro, an interactive disassembler installed on the remote host, is 6.0 or newer. It is, therefore, reportedly affected by an unspecified vulnerability. This vulnerability is mitigated by an IDA plugin tilcheck.plw, which was not detected. By tricking a user into loading a...

CVE-2011-4783

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...

Design/Logic Flaw

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...

CVE-2011-4783

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...

CVE-2011-4783

CVE-2011-4783 affects IDA Pro’s IDAPython plugin up to version 1.5.2.3. A crafted IDB file can trigger arbitrary code execution due to improper handling of swig_runtime_data in the current working directory, with an attacker leveraging user-assisted remote access. The vulnerability enables code e...

PT-2011-5104

Name of the Vulnerable Software and Affected Versions IDA Pro versions prior to 1.5.2.3 Description The issue allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file. This is related to improper handling of certain swig runtime data files in the current working...

CVE-2011-4783: Improper Input Validation

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...

Vulnerability in Hex-Rays IDA Pro, IDAPython Plugin Could Allow Arbitrary Script Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting IDA Pro running the IDAPython plugin. By default, the IDAPython plugin is installed with all versions of IDA Pro. Microsoft discovered and disclosed the vulnerability under...

CVE-2009-1498

CVE-2009-1498 affects iDB (Game Maker 2k Internet Discussion Boards) 0.2.5 Pre-Alpha SVN 243. Directory traversal via the skin parameter in profile.php allows remote inclusion and execution of local files. Root cause: insufficient sanitization of user-supplied input leading to local file include....

CVE-2009-1498

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...