notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

Gh0st-light

Gh0st-light El viejo trasto tras la simplificación Basado en Gh0st3.6...

Malicious code in css-light-dark-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c154d7855924568c88181f172f46e84aac202bd6cb29974eb2ffaa3ec3ea7 The package presents itself as a trivial CSS polyfill index.js exports an empty object but ships thunderboltRegistry.js, which on load runs a...

AntimalwareBlight

Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...

RunAsWinTcb

RunAsWinTcb Resumen RunAsWinTcb utiliza un exploit de espacio de usuario para ejecutar una DLL con un nivel de protección de WinTcb-Light. Puede encontrar una descripción general de la vulnerabilidad y las capacidades de un exploit aquí:...

dc34-vault

Aplicación vault de DC34 !WARNING Cargar tu propio firmware en tu badge borrará la clave de cifrado de luz y hará que tu badge entre en modo desarrollador. AVISO: este repositorio ahora está huérfano y se archivará pronto, ya que se ha fusionado en xous-core. Solo existía en el repositorio de...

PPLFault

PPLFault Por Gabriel Landau en Elastic Security. De PPLdump Is Dead. Long Live PPLdump! presentado en Black Hat Asia 2023. PPLFault ACTUALIZACIÓN 2024-02: Microsoft parcheó PPLFault el 2024-02-13. Consulteeste hilo para la discusión relacionada. Explota un TOCTOU en Code Integrity de Windows para...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Explotación de restablecimiento de fábrica en Zigbee Light Link Código del programa simulación de Zigbee en Python zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def...

PPLdump

PPLdump ⚠️ 2022-07-24 - 自 Windows 10 21H2 10.0.19044.1826 （2022年7月更新）起，PPLdump 中实现的利用方法已不再有效。NTDLL 中的一个补丁现在阻止 PPL 加载 已知 DLL 。更多信息请参见此处。 本工具实现了一个 用户态 漏洞利用，最初由 James Forshaw（即 @tiraniddo）在这篇博文中讨论，用于以管理员身份 转储任意 PPL 的内存 。 我撰写了两篇关于此工具的博文。第一部分介绍受保护进程的概念，第二部分讨论绕过技术本身。 博文第一部分 ：你真的了解 LSA 保护 RunAsPPL 吗？...

CVE-2026-97181

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181

The GPM LIGHT software developed by ezGlobal contains a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs , potentially leading to the disclosure of sensitive information. No specific version numbers, root causes, or remediation steps are prov...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

EUVD-2026-85814

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

PT-2026-97725

Name of the Vulnerable Software and Affected Versions GPM LIGHT affected versions not specified Description Unauthenticated remote attackers can directly access system logs, leading to sensitive data exposure. Recommendations At the moment, there is no information about a newer version that...

[SECURITY] [DSA 6509-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2026 https://www.debian.org/security/faq -...

Debian dsa-6509 : gimp - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6509 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/securit...

CVE-2026-90249: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...