CVE-2026-96812

A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...

EUVD-2026-87111

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

pinecone

Pinecone는 WLAN 네트워크 감사 도구로, 레드 팀 사용에 적합합니다. 모듈을 통해 확장 가능하며, Debian 기반 운영체제에서 실행되도록 설계되었습니다. Pinecone는 특히 라즈베리 파이를 휴대용 무선 감사 박스로 사용할 수 있도록 제작되었습니다. 이 도구는 교육 및 연구 목적으로만 설계되었습니다. 명시적인 허가 없이 사용하지 마십시오. 설치 Pinecone를 실행하려면 Debian 기반 운영체제가 필요합니다 Raspbian, Raspberry Pi Desktop, Kali Linux에서 테스트되었습니다...

pinecone

Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. This tool is designed for...

fuzzuli

fuzzuli 동기 • 배경 • 설치 • 사용법 • fuzzuli 실행 • 도구 페이지 fuzzuli 는 도메인을 기반으로 동적 단어 목록을 생성하여 중요한 백업 파일을 찾는 URL 퍼징 도구입니다. 동기 수년간 애플리케이션 보안 테스트를 수행하면서, 외부에서 접근 가능한 디렉터리에 보관된 많은 중요한 백업 파일을 발견했습니다. 이러한 파일의 이름을 지정할 때 일반적으로 선호되는 단어가 사용되었습니다예: backup.zip, db.rar, conf.tar.gz 등. 그러나 대부분의 파일은 애플리케이션이 위치한 도메인 이름을...

CVE-2022-41445

CVE-2022-41445 CodeIgniter를 사용하는 교사 기록 관리 시스템의 사이트 간 스크립팅 XSS 제안된 설명 CodeIgniter 1.0을 사용하는 기록 관리 시스템에서의 사이트 간 스크립팅 XSS 취약점으로, 공격자가 Add Subject 페이지에 제작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 추가 정보 개념 증명PoC: https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ 취약점 유형 사이트 간...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

beanshooter

beanshooter beanshooter 는 JMX 엔드포인트에서 일반적인 취약점을 식별하는 데 도움이 되는 JMX 열거 및 공격 도구입니다. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 설치 beanshooter 는 maven 프로젝트이며 설치가 간단합니다. maven이 설치되어 있으면 다음 명령을 실행하여 실행 가능한 .jar 파일을 생성할 수 있습니다:console qtc@devbox...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Eaton Intelligent Power Manager v1.6 のローカルファイルインクルージョンにより、攻撃者がファイルをインクルードでき、機密情報の漏えい、サービス拒否、コード実行につながる可能性があります。 CVE-2018-12031 脆弱性を悪用するには、'https://HOST/server/nodeupgradesrv.js?action=downloadFirmware&firmware=/../../../../../../../../../../'...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

azazel

Azazel 軽量な eBPF ベースのランタイムセキュリティトレーサーで、マルウェア解析サンドボックス に特化して設計されています。隔離されたコンテナにサンプルを投入すると、Azazel はすべてのシステムコール、ファイル操作、ネットワーク接続、不審な動作をキャプチャし、発生したすべてのイベントをクリーンな JSON ストリームで提供します。 自動マルウェア解析サンドボックス を構築する場合でも、自律型 AI エージェントのための 24/7 ランタイムモニタリング が必要な場合でも、Azazel は外科的で不可視な、AI 対応の JSON テレメトリを提供します。 CLI リファレンス...

CVE-2019-3403

CVE-2019-3403 CVE-2019-3403を悪用してJIRAアプリケーションからすべてのユーザーを簡単にスクレイピングできるようにしたかったので、このスクリプトを急ごしらえで作りました。決してきれいなコードではありませんし、1000人を超えるユーザーを返すリクエストには対応していません（最初の1000人に切り詰められます）が、脆弱性のあるJIRAサーバーからすべてのユーザーを素早くスクレイピングできます。 使用方法 root@kitploit: usage: scrapejira.py -h -d DOMAIN -q QUERY -o OUT -v Scrape User...

CVE-2026-97866 Zhonglun CloudPOS Automatic Update Program.cs channel accessible

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

CVE-2026-97866

A weakness exists in Zhonglun CloudPOS 3.0 within the Automatic Update component, specifically involving an unknown functionality in the Program.cs file. By manipulating arguments such as version , url , packagekey , or package name , a remote attacker can cause a channel to become accessible by ...

EUVD-2026-87110

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

CVE-2019-5418

CVE-2019-5418 1. 脆弱性の説明 Ruby on RailsはWebアプリケーションフレームワークであり、比較的新しいフレームワークで、Ruby言語上に構築されています。この脆弱性は主に、Ruby on Railsが指定されたパラメータのrender fileを使用してアプリケーション外のビューをレンダリングすることに起因します。特定のコントローラにアクセスするリクエストパケットを変更し、「…/…/…/…/」を使用してパストラバーサルを達成し、次に「」を使用してテンプレートクエリパスを閉じることにより、対象のファイルが外部テンプレートとして解析されるようにします。 3...

CheckPlz

CheckPlz CheckPlz は、人気の ThreatCheck および GoCheck ツールを Rust で移植したものです。AMSI（Antimalware Scan Interface）と Windows Defender を活用しながら、ファイルの潜在的な脅威をスキャンするように設計されています。悪意のあるコンテンツを高精度に特定し、包括的な分析を提供することで、CheckPlz は強化された効率的なファイルスキャン体験を提供します。 主な機能 AMSI 統合: 脅威検出のための正確なバッファスキャンを実行します。 バイナリサーチによる脅威の特定:...

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below - actions-cool/issues-helper...