41947 matches found
CVE-2026-89772
A flaw was found in the Btrfs filesystem of the Linux kernel. This vulnerability allows a local attacker with write access to a memory-mapped file to modify data while it is being written to disk. This can lead to data corruption, where the integrity of the stored information is compromised, or...
umap
umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...
CVE-2022-42046
EvilWfshbr CVE-2022-42046 Prueba de concepto de escalada de privilegios local de wfshbr64.sys wfshbr64.sys y wfshbr32.sys permiten que un usuario arbitrario realice operaciones bit a bit con un desplazamiento EPROCESS arbitrario y un valor de banderas para elevar intencionadamente el proceso del...
obfuscation_detection
Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...
hashcat
hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...
v2ray-core
Project V Project V 是一套网络工具,帮助你构建自己的计算机网络。它保护你的网络连接,从而保护你的隐私。 相关链接 文档 和 新手入门指南 欢迎通过 Transifex 翻译 V2Ray 文档 打包状态 如果您愿意为其他发行版/平台打包 V2Ray,请通过 GitHub issues 告诉我们或寻求帮助。 许可证 The MIT License MIT 致谢 本仓库依赖以下第三方项目: 生产环境依赖: gorilla/websocket quic-go/quic-go pires/go-proxyproto seiflotfy/cuckoofilter...
BlockOpenHandle
BlockOpenHandle Bloquea cualquier proceso que intente abrir un HANDLE a tu proceso; solo SYTEM tiene permitido abrir un handle a tu proceso, con esto puedes evitar los escáneres de memoria remotos. POC...
DeadManSwitch
死亡开关 概述 死亡开关(Dead Man Switch)是一款用 Rust 编写的跨平台安全应用程序,可在紧急情况下自动保护敏感数据。该应用程序监控多种触发机制,并在激活时执行即时系统锁定程序,包括加密卷卸载和受控的系统关机。 核心功能 心跳计时器 :错过签到间隔时自动触发 Telegram 集成 :通过安全消息进行远程控制 网络触发 :基于局域网广播的激活 USB 检测 :基于硬件的触发 Flic 按钮支持 :物理激活机制 VeraCrypt 集成 :自动卸载加密卷 跨平台 :支持 Windows、Linux 和 macOS 系统要求 Rust 1.82.0 或更高版本(安装指南)...
opgp-service-cve-2019-9153
CVE-2019-9153 vulnerabilidad reproducir PoC basado en la configuración de BSI investigar la vulnerabilidad de la API de opgp-service ante dicho ataque ejecutar pruebas con: root@kitploit: npm test conclusión: opgp-service está configurado por defecto con AEADprotect=true lo que protege contra el...
CloudUnflare
CloudUnflare...
CVE-2026-89772
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the foliocleardirtyforio call in extentwritecachepages with a plain foliotestdirty check. Besides clearing th...
CVE-2026-89708
In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...
CVE-2026-89532
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...
hblock
通过拦截广告、跟踪和恶意软件域名来提升您的安全性和隐私。 这是做什么的? hBlock 是一个符合 POSIX 标准的 Shell 脚本,它从多个来源获取提供广告、跟踪脚本和恶意软件的域名列表,并生成一个hosts 文件以及其他格式,以阻止您的系统连接这些域名。 ⚠️ 默认情况下,hBlock 会替换您系统的 hosts 文件 ,如果您有想要保留的条目,请先考虑备份。 安装 hBlock 在多种包管理器中可用。请查看 PACKAGES.md 文件获取最新列表。 也可以通过运行以下命令手动安装最新版本: root@kitploit: curl -o /tmp/hblock...
identYwaf
identYwaf 是一个基于盲推断识别网页防护类型(即 WAF)的工具。盲推断通过检查由一组预定义的攻击性(非破坏性)Payload 所引发的响应来执行,这些 Payload 仅用于触发中间的网页防护系统(例如 http://?aeD0oowi=1 AND 21)。目前它支持超过 80 种不同的防护产品(例如 aeSecure、Airlock、CleanTalk、CrawlProtect、Imunify360、MalCare、ModSecurity、Palo Alto、SiteGuard、UrlScan、Wallarm、WatchGuard、Wordfence 等),知识库也在不断扩充...
CVE-2026-89772
CVE-2026-89772 affects the btrfs filesystem in the Linux kernel . A patch (commit 095be159f3eb) replaced the folio_clear_dirty_for_io() call in extent_write_cache_pages() with a plain folio_test_dirty() check, losing the write-protection of shared mmap PTEs during data writeback. Without this pro...
EUVD-2026-76684
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the foliocleardirtyforio call in extentwritecachepages with a plain foliotestdirty check. Besides clearing th...
CVE-2026-89772 btrfs: write-protect folios during data writeback
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the foliocleardirtyforio call in extentwritecachepages with a plain foliotestdirty check. Besides clearing th...
EUVD-2026-76682
In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fsbiointegrityalloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fsbiointegrityfree in...
EUVD-2026-76620
In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...