dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported...

CVE-2023-33768

CVE-2023-33768 설명 Belkin Wemo Smart Plug WSP080 v1.2의 장치 펌웨어 업데이트 과정에서 펌웨어 서명 검증이 올바르게 이루어지지 않아, 공격자가 조작된 펌웨어 파일을 통해 서비스 거부DoS를 유발할 수 있습니다. 추가 정보 모바일 애플리케이션을 통해 Wemo 스마트 플러그의 펌웨어를 업데이트할 때, 스마트 플러그 펌웨어 바이너리의 펌웨어 서명이 유효하지 않으면 Wemo 스마트 플러그가 응답을 멈추고벽돌 상태가 됨 동작하지 않게 되는 것을 발견했습니다. Wemo Android...

CVE-2023-33768

CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / 研究 + PoC 悪意のあるペイロードを含む 1 つのショートカット + 1 つの .DLL を作成 = USB に入れて被害者に送る = 被害者が USB を開く = ペイロードが自動的に起動する！ 根本原因 1. まず、このバグが正確にどこから発生するのかを知る必要があります！ それは Plug-and-Play（プラグアンドプレイ） と呼ばれる機能によるものです。OS がデバイスを自動検出し、リソースを割り当て、適切なドライバーをロードして、再起動することなく即座に動作させます。USB を挿して Windows Explorer explorer.e...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server 検出ツールキット CVE-2026-21962 の影響を受ける Oracle HTTP Server および WebLogic Proxy Plug-in インスタンスを識別するための、安全で悪用を伴わない検出ツールです。 🧠 脆弱性の概要 CVE: CVE-2026-21962 深刻度: Critical 攻撃ベクトル: Network 認証要件: 不要 この脆弱性により、リモートの認証されていない攻撃者が機密性と完全性を侵害し、システム全体の完全な侵害につながる可能性があります。 🎯 影響を受けるバージョン...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Oracle WebLogic Server Proxy Plug-In RCE（リモートコード実行）脆弱性悪用ツールの Java GUI バージョン。 プロジェクト構造 java-version/ ├── pom.xml Maven プロジェクト設定ファイル ├── README.md プロジェクト説明ドキュメント ├── run.bat Windows 起動スクリプト └── src/ └── main/ └── java/ └── com/ └── ashwesker/ └── cve202621962/ ├...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — 严重安全漏洞 😈 🚨 严重等级 CVSS 评分： 10.0 / 10（严重） 发布时间： 2026 年 1 月 20 日 风险等级： 🔥 最高 — 建议立即采取行动 🧠 这是什么？ 一个影响以下组件的严重漏洞 ： Oracle HTTP Server Oracle WebLogic Server 代理插件 （适用于 Apache 和 IIS） 该漏洞允许未经身份验证的远程攻击者 通过 HTTP 入侵受影响的服务器，无需登录凭据。 🎯 攻击者可以做什么？ 如果被利用，攻击者可以： 🗑️ 删除 关键数据 ✏️ 修改 系统或应用程序文件 📤 窃取敏感信息 🔓...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in には、認証なしでネットワーク経由で到達可能な、容易に悪用可能な脆弱性があり、HTTP経由での侵害を許します。影響を受けるサポート対象バージョンには、12.2.1.4.0、14.1.1.0.0、14.1.2.0.0 が含まれます。 CVSS 10.0（Oracle / NVD...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer...

CVE-2024-25291

DeskFiler RCE CVE-2024-25291 취약점에 대한 개념 증명Proof-of-Concept입니다. deskfiler - 1.2.3은 애플리케이션에서 Electron webview를 허용하며, 그 결과 원격 코드 실행이 발생합니다. 이 저장소에는 취약한 예제 애플리케이션과 이에 대한 개념 증명POC 익스플로잇이 포함되어 있습니다. PoC로서 이 과정을 자동화하는 파이썬 파일이 있습니다. 1. 취약점 개요: 취약점 대상: RCE를 통한 오픈 리다이렉트 취약점 버전: deskfiler-1.2.3 문제 발생 지점:...

MGASA-2026-0457 Updated erlang package fixes security vulnerabilities

SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-plugins-base-1.28.7-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

SUSE CVE-2026-96545

An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents in...

SUSE CVE-2026-96546

A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately...

Linux Distros Unpatched Vulnerability : CVE-2026-96545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the...