PcapViz

PcapViz PcapViz 利用从网络设备（使用 tcpcap 或其他抓包软件）捕获的 pcap 文件中的包信息，将网络绘制为设备拓扑和信息流图。它过滤并可选地在以下 3 个“层”中的任意一层显示捕获的数据包： 设备级流量拓扑， IP 通信， TCP/UDP 通信。 每层都能从同一组网络数据包生成不同的网络图。这种分离使得更清晰地看到每一层的数据流，而不是像许多其他可视化包那样混合在一起。应该更容易确定关键拓扑节点或发现数据外泄尝试的模式。 特性 网络拓扑图 - 2 = 设备；会话信息流图：3 = IP，4 = TCP/UDP 通信图节点标签显示国家信息和连接统计信息...

in-toto

in-toto in-toto proporciona un framework para proteger la integridad de la cadena de suministro de software. Lo hace verificando que cada tarea de la cadena se lleva a cabo según lo planificado, únicamente por personal autorizado, y que el producto no es manipulado en tránsito. in-toto requiere q...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. id: CVE-2016-1000141 info: name: WordPress Page Layout builder v1.9.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress plugin Page-layout-builder v1.9.3 contains a cross-site...

allthingsida

Sistema operativo MS Windows Scripts de enumeración de PEB/LDRDATATABLEENTRY Estructuras PEB/TEB x64 Estructuras PEB/TEB x86...

kasld

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

CVE-2014-4378

CoreGraphics 信息泄露 - CVE-2014-4378 本文探讨了在 IOS 7.1.x 上利用 MobileSafari 的可能性。通过将精心制作的 PDF 文件用作 HTML 图像，可以将内存布局信息泄露给浏览器 Javascript 解释器。Apple CoreGraphics 库在解析嵌入 PDF 内容流中的内联图像的色彩空间规范时未能验证输入。该问题导致信息泄露漏洞，增强了攻击者利用与此库链接的任何应用程序中的其他漏洞的能力。这也被证明有助于绕过多种漏洞缓解措施，如 ASLR、DEP 和代码签名。 摘要： 标题: Apple CoreGraphics 信息泄露 CV...

Log4j_CVE-2021-45046

Log4j 2.15.0 权限提升 -- CVE-2021-45046 攻击 描述 已经发现，Apache Log4j 2.15.0 中对 CVE-2021-44228 的修复在某些非默认配置下是不完整的。当日志记录配置使用了非默认模式布局，且包含上下文查找（例如 $$ctx:loginId）或线程上下文映射模式（%X、%mdc、%MDC）时，攻击者可通过控制线程上下文映射（MDC）输入数据，使用 JNDI 查找模式构造恶意输入数据，导致拒绝服务（DOS）攻击。Log4j 2.15.0 默认将 JNDI LDAP 查找限制为本地主机。请注意，之前的缓解措施（例如设置系统属性...

CVE-2026-91792

Foxit PDF Editor/Reader is vulnerable to a use-after-free condition when processing a specially crafted PDF. The vulnerability is triggered when the application performs reentrant zoom and layout operations through page- and annotation-related JavaScript actions, causing it to access page objects...

EUVD-2026-85130

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they have been released, resulting in a use-after-free condition a...

Ruby_Pricise_Heap_Spray

RubyPriciseHeapSpray 使用 ruby 字符串在 win7 环境中进行精确的堆喷射 注：0c0c0c0c 你需要根据调用 spray 函数的次数来调整最后的迭代次数。这是因为 ruby 的工作机制……基本上，当某个大小的堆分配使用率达到 100% 时，ruby 就会删除该大小的所有堆分配 🙂...

CVE-2026-93709

Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...

UBUNTU-CVE-2026-93709

Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...

CVE-2026-93709 Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler

Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...

p5-Dancer2 -- Multiple vulnerabilities

Dancer project reports: Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not...

CVE-2026-84126

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout: Grid component...

CVE-2026-77166

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items...

CVE-2026-77166

CVE-2026-77166 affects the emoji field in a web application's page emoji update endpoint , where improper input validation allows an authenticated user to inject long text and line breaks , breaking the sidebar layout and potentially hiding other items. The vulnerability is rated CVSS 3.0 2.4 (Lo...

CVE-2026-77166

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items...

CVE-2023-44771_ZenarioCMS--Stored-XSS---Page-Layout

ZenarioCMS 存储型跨站脚本漏洞 v.9.4.59197 作者：Sergio 描述： ZenarioCMS v.9.4.59197 中存在跨站脚本漏洞，允许本地攻击者通过精心构造的脚本在页面布局中执行任意代码。 攻击向量： 通过利用页面布局中条目过滤机制的漏洞，注入 JavaScript 代码，当用户访问网页时该代码将被执行。 POC： 登录面板后，进入“布局 - 页面布局”（管理菜单）。 点击“编辑布局”并添加以下载荷： XSS 载荷： root@kitploit: 下图展示了嵌入的代码如何在主网页中执行载荷。 附加信息： https://zenar.io/...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 攻击 描述 经发现，Apache Log4j 2.15.0 中针对 CVE-2021-44228 的修复在某些非默认配置下并不完整。当日志配置使用非默认的模式布局（Pattern Layout），且包含上下文查找（例如 $$ctx:loginId）或线程上下文映射模式（%X、%mdc 或 %MDC）时，攻击者可以通过控制线程上下文映射（MDC）输入数据，利用 JNDI 查找模式构造恶意输入数据，从而导致拒绝服务（DOS）攻击。Log4j 2.15.0 默认尽力将 JNDI LDAP 查找限制为本地主机。Log4j 2.16.0...