pocket_disasm

Pocket Disasm 一个 MCP 端点。多个隔离的 IDALib 会话。 一个轻量级的、以代理为先的控制层，用于使用 IDA Pro MCP 工具集进行无头二进制分析。 !IMPORTANT Pocket Disasm 是一个独立的开源项目。它与 Hex-Rays 无任何关联、未获其认可、未受其赞助，也非其官方产品。 IDA Pro 和 IDALib 是 Hex-Rays 的产品，需要用户单独拥有有效的安装和许可证。Pocket Disasm 不分发 IDA、IDALib 或任何 Hex-Rays 软件。 Pocket Disasm 运行一个公共的 MCP...

c2-cloud

关于项目 C2 Cloud 是一个强大的基于网页的 C2 框架，旨在简化渗透测试人员的工作。它允许像在 AWS 云中访问 EC2 实例一样轻松地访问被攻陷的后门。通过用户友好的界面，它可以管理多个同时进行的后门会话。 C2 Cloud 是开源的。安全分析师可以自信地进行模拟，获得宝贵的经验，并为其组织的主动防御态势做出贡献。 支持的反弹 Shell： 1. Reverse TCP 2. Reverse HTTP 3. Reverse HTTPS（配置在负载均衡器后面） 4. Telegram C2 演示 C2 Cloud 演练： https://youtu.be/hrHTRDcGj8 使...

OptixGate

Optix Gate 是一款面向 Microsoft Windows 的多功能安全远程管理工具。它可以同时提供对多个 Windows 会话和/或多台计算机的远程访问。 历史 Optix Gate 的创建，除其他目的外，是为了保持并进一步发展我的 Windows 应用程序编程技能。如今，我的专业工作更多地聚焦于攻防安全领域，而非软件开发。这个项目使我能够在空闲时间继续练习底层和系统编程，就像我职业生涯早期所做的那样。 Optix Gate 这个名字致敬了 2000 年代一个著名的 RAT。视觉设计有意呼应了那个时代的地下恶意软件场景，当时许多工具都采用了扁平化界面，例如...

CVE-2025-71402

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...

EUVD-2025-210584

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...

CVE-2025-71402 better-auth before 1.4.0 Session Revocation via Forged Cookie

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...

CVE-2025-71402

The CVE affects better-auth versions >1.3.34 and

CVE-2025-71402

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...

CVE-2025-71402 better-auth before 1.4.0 Session Revocation via Forged Cookie

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature e.g., via...

PYSEC-2026-360 Session Fixation in ipsilon

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active...

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection and Exploitation Tool...

GHSA-WMJR-V86C-M9JJ Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions

Summary A vulnerability was identified in the multi-session plugin for Better Auth, specifically in the /sign-out after-hook. The hook trusts raw multi-session cookies and forwards the extracted values directly to internalAdapter.deleteSessions without verifying the cookie signature. Because cook...

Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions

Summary A vulnerability was identified in the multi-session plugin for Better Auth, specifically in the /sign-out after-hook. The hook trusts raw multi-session cookies and forwards the extracted values directly to internalAdapter.deleteSessions without verifying the cookie signature. Because cook...

EUVD-2025-199765

Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions...

EUVD-2022-2125

Malicious code in bioql PyPI...

EUVD-2024-48283

Malicious code in bioql PyPI...

LogonUI.exe process hanging after logoff from multi-session VDA

When utilizing multi-session VDA with the Duo Security agent installed, users may close out the applications in an attempt to log off of the VDA but the LogonUI.exe process will hang. This will result in multiple Terminal Services sessions showing active with the same session number, but no user...

Enabling WPF Rendering for Citrix HDX on Multi-Session VDAs

Overview Windows Presentation Foundation WPF applications can leverage GPU acceleration in Citrix Virtual Apps and Desktops CVAD environments running Windows Multi-session OS. By enabling WPF rendering on the server’s GPU, this reduces CPU load and improves graphics performance for WPF...

Teams 2.x missing from start menu on Server 2022/W11 Multi-session when installed in an App Layer

When deploying Teams 2.x in an App Layer on Server 2022/W11 Multi-session, Teams would not show up in the start menu...

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...