stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2022-26629

잠금 화면 우회 CVE-2022-26629 영향을 받는 제품 SoroushPlus+ Messenger 1.0.30 취약점 유형 부적절한 접근 제어 영향 잠금 화면 우회 요약 충분하지 않은 권한 및 특권에 대한 부적절한 처리는 공격자가 잠금 화면 기능을 수정 및 덮어쓰기하여 승인 없이 우회할 수 있게 합니다. 익스플로잇 BypassLockScreen.py 자동 익스플로잇 PoC 1. BypassLockScreen.py를 SoroushPlus+ 설치 디렉터리에 넣습니다. 2. Python3 BypassLockScreen.py를...

Giga Messenger WordPress - Cross-Site Scripting

Giga Messenger WordPress plugin = 2.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 SQL 인젝션을 통한 RCE BigAnt Messenger의 SQL 인젝션 취약점으로 인해 RCE 취약점이 발생합니다. 다음 단계에 따라 익스플로잇하십시오. 사용법: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit -r, --rhost RHOST Target IP address -p, --rport RPORT Targ...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

CVE-2025-49091-Gajim-RCE

CVE-2025-49091 - Python 개념 증명PoC CVE-2025-49091 Gajim 암호화 메신저용 개념 증명PoC 익스플로잇입니다. Patryk PtakSivertPL과 Dennis Dast가 독립적으로 발견했으며, 익스플로잇은 Patryk Ptak이 작성했습니다. 파일 CVE-2025-49091.py – Python PoC. 사용법 python3 CVE-2025-49091.py 필요에 따라 스크립트에서 필요한 인수 또는 구성을 조정하세요. 면책 조항 이 저장소는 교육 목적 , 보안 연구, 그리고 승인된 보안...

hermes-the-messenger

메신저 헤르메스 Windows에서 푸시 알림을 통한 지속성persistence 확보를 위한 PoC 더 자세한 기술적 세부 사항과 배경 내용은 여기 블로그 포스트를 참조하세요: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence 사용법 무엇보다 먼저 Azure를 설정해야 합니다. 그런 다음 푸시 알림에 스스로를 등록하기 위해 실행 파일을 한 번 실행해야 합니다. Azure 앱의 개체 IDobject i...

exploits

exploits 공개된 PoC는 exploitdb.com에서 확인할 수 있습니다. Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

voron-crypto

Voron 암호화/프로토콜 라이브러리 — 리뷰 요청 이것은 소규모 E2EE 메신저 프로젝트의 암호화 및 메시징 프로토콜 코어로, 외부 리뷰를 위해 별도로 분리된 것입니다. 전체 제품은 아닙니다 — Android 클라이언트와 배포 구성은 의도적으로 제외되었으며, 이것은 검토가 필요한 부분일 뿐입니다. 여기에 포함된 것 common/ — 라이브러리 자체: e2ee/ — X3DH-lite비동기 키 합의 + 그 위의 Double Ratchet, Curve25519/ChaCha20-Poly1305/Ed25519/HKDF 기반JDK 제공...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 CVE-2020-27358 및 CVE-2020-27359 에 대한 익스플로잇 단계 CVE-2020-27358 REDCap 8.11.6부터 10 이전의 9.x 버전에서 발견된 문제입니다. 메신저의 CSV 기능사용자가 대화 스레드를 CSV로 내보낼 수 있게 해주는은 권한이 없는 사용자가 요청의 threadid 매개변수를 엔드포인트 Messenger/messengerdownloadcsv.php?title=Hey&threadid=THREADID로 변경하여 서로의 대화 스레드를...

SUSE CVE-2026-90067

In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client sends a banner with a payloadlen of 0, the kernel sets up a 0-length...

Linux Distros Unpatched Vulnerability : CVE-2026-90067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client...

CVE-2026-90067

In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client sends a banner with a payloadlen of 0, the kernel sets up a 0-length...

DEBIAN-CVE-2026-90067

In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client sends a banner with a payloadlen of 0, the kernel sets up a 0-length...

CVE-2026-90067

CVE-2026-90067 is a Linux kernel vulnerability in the Ceph messenger v2 protocol implementation (net/ceph/messenger_v2.c). When parsing the msgr2 protocol banner, a client sending a payload_len of 0 causes the kernel to set up a 0-length socket read , violating a state-machine invariant and trigg...

PT-2026-94415

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libceph component when parsing the Ceph messenger v2 protocol banner. The payload len field is decoded from the banner prefix; if a client provides a payload len o...

CVE-2026-90067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the payloadlen field is decoded from the banner prefix. If a client sends a banner with a payloadlen of 0, the kernel sets up a 0-length...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the net/ceph/messengerv2.c file within the Linux kernel before version 6.4.5. There is an integer signedness error, which leads to a buffer overflow and remote code execution via the HELLO command or one of the AUTH frames. This occurs due to an untrusted length value...

EUVD-2026-70850

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...