CVE-2022-21907

CVE-2022-21907 Уязвимость в стеке протокола HTTP, позволяющая удаленно выполнять код и возможный сбой системы. Содержание CVE-2022-21907 Описание Конфигурация машины-жертвы Конфигурация машины атакующего Эксплойт Доказательство концепции Ссылки Описание CVE-2022-21907 — это уязвимость в стеке...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

libtheora-CVE-2024-56431-PoC

Сборка исходного кода приложения CFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" CXXFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" LDFLAGS="-fsanitize=address" ./configure make Сборка исходного кода PoC g++ fuzzer.cpp -o poc -I include/ lib/.libs/libtheora.a -fsanitize=address...

CVE-2021-2109_poc

weblogicCVE-2021-2109poc weblogic CVE-2021-2109 пакетная проверка POC Использование: Сначала загрузите JNDIExploit.jar на другом сервере и запустите java -jar JNDIExploit.jar -i ip Затем поместите IP-адреса для проверки в файл urls.txt и запустите этот скрипт...

OSINT-with-LLM

POC : LLM 기반 OSINT 이 저장소는 LLM 기반 보안 보고를 통한 도메인, IP, 이메일 정찰을 시연합니다.. 개요 이 프로젝트는 두 가지 주요 구성 요소 로 나뉩니다: 1. 정찰 모듈 2. LLM 분석 및 보고 정찰 모듈 목적 IP, 도메인 또는 이메일에 대한 정보 수집 접근 방식 도메인 OSINT: WHOIS 조회 Shodan 정보 수집 SSL 인증서 검증 VirusTotal "악성/정상" 상태 IP 정찰: AbuseIPDB 점수 및 분류 이메일 정찰: 유출/노출 조회 LLM 분석 및 보고 기술적 OSINT를 사...

WDBFontOverwrite

Proof-of-concept приложение для перезаписи шрифтов на iOS с помощью CVE-2022-46689. Работает на iOS 16.1.2 и ниже протестировано на iOS 16.1 на устройствах без джейлбрейка. IPA доступен в разделе Releases. Включенные шрифты: DejaVu Sans Condensed DejaVu Serif DejaVu Sans Mono Go Regular Go Mono...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

Netsweeper 4.0.3 - Cross-Site Scripting

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. id: CVE-2014-9608 info: name: Netsweeper 4.0.3 - Cross-Site Scriptin...

Telaen => v1.3.1 - Open Redirect

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. id: CVE-2013-2621 info: name: Telaen = v1.3.1 - Open Redirect author: ctflearner severity: medium description: | Open Redirection...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. id: CVE-2026-25892 info: name: Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent Do...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

React Server Components - Denial of Service

React Server Components 19.0.0 to 19.2.1 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain an insecure deserialization vulnerability caused by unsafe payload deserialization in Server Function endpoints, letting unauthenticated attackers cause...

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

AirFlow < 2.4.0 - Remote Code Execution

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...

Microweber <1.2.12 - Integer Overflow

Microweber before 1.2.12 is susceptible to integer overflow. The application allows large characters to insert in the input field 'first & last name,' which can allow an attacker to cause a denial of service via a crafted HTTP request. id: CVE-2022-0968 info: name: Microweber 1.2.12 - Integer...