pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

Gh0st-light

Gh0st-light 精简之后的老东西 基于Gh0st3.6...

RunAsWinTcb

RunAsWinTcb 概述 RunAsWinTcb 利用用户态漏洞，以 WinTcb-Light 保护级别运行 DLL。 有关该漏洞及漏洞利用能力的概述可在此处找到： https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387 用法 命令：RunAsWinTcb.exe POCDLL.dll 终止 Windows Defender：...

AntimalwareBlight

使用此 PowerShell 模块可在 antimalware-light 保护级别执行 PowerShell 代码。此代码在 Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon 演讲以及 Black Hat USA 2022 中被重点提及。此模块需要以提升权限运行。此模块旨在强调 antimalware-light 保护防篡改功能的强度仅取决于最弱供应商的 ELAM 驱动程序。 感谢 Microsoft Defender...

PPLdump

PPLdump ⚠️ 2022-07-24 - 自 Windows 10 21H2 10.0.19044.1826 （2022年7月更新）起，PPLdump 中实现的利用方法已不再有效。NTDLL 中的一个补丁现在阻止 PPL 加载 已知 DLL 。更多信息请参见此处。 本工具实现了一个 用户态 漏洞利用，最初由 James Forshaw（即 @tiraniddo）在这篇博文中讨论，用于以管理员身份 转储任意 PPL 的内存 。 我撰写了两篇关于此工具的博文。第一部分介绍受保护进程的概念，第二部分讨论绕过技术本身。 博文第一部分 ：你真的了解 LSA 保护 RunAsPPL 吗？...

MINI-MCWM-R84M-MVWM

Bulletin has no description...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An unauthenticated attacker with network access to the bridge can read device data and control connected lights . ...

PT-2026-71799

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

SUSE CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives HVM/PVH: HAP, PV: shim are commonly available, the decision was to deprecate the functionality, while still retainin...

CVE-2026-59533

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

EUVD-2026-49209

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

CVE-2026-59533

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

CVE-2026-59533

The CVE concerns the WordPress Relevanssi Light plugin (versions <= 1.2.2). It describes an unauthenticated SQL injection vulnerability in this plugin, with CVSS v3.1 indicating a CRITICAL base score (9.3) and HIGH confidentiality impact. The affected component is the Relevanssi Light plugin f...

CVE-2026-59533 WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

EUVD-2026-49179

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

CVE-2026-64494

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...

CVE-2026-64494 iio: light: gp2ap002: fix runtime PM leak on read error

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...

CVE-2026-64494

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...