101 matches found
Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery
The Ray Dashboard API is affected by a Server-Side Request Forgery SSRF vulnerability in the url parameter of the /logproxy API endpoint. The API does not perform sufficient input validation within the affected parameter and any HTTP or HTTPS URLs are accepted as valid. id: CVE-2023-48023 info:...
HexRaysCodeXplorer
root@kitploit: | | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...
haruspex
haruspex "Hacking es la disciplina de cuestionar todas tus suposiciones todo el tiempo." -- Dave Aitel Haruspex es un plugin headless de IDA extremadamente rápido que extrae el pseudocódigo generado por el descompilador de IDA en un formato adecuado para importarlo en un IDE, o para ser analizado...
banrays
Ban-Rays 用于检测带有摄像头的智能眼镜的眼镜 我主要尝试了两种方法： 光学：利用光反射对摄像头进行分类。 网络：蓝牙和Wi-Fi分析。 到目前为止，基于蓝牙（BLE）对特定设备进行指纹识别似乎是最简单、最可靠的方法。下图是第一版，当检测到Meta Raybans的BLE广播时，它会播放《塞尔达传说》的“找到秘密”音效。 我基本上把这个README当作日志本，所以会记录我当前的方法和想法。 光学 通过向摄像头镜头发送红外光，我们可以利用相机中CMOS传感器将光直接反射回光源的特性（称为“回反射”/“猫眼效应”）来识别摄像头。...
ida-efitools2
About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...
IDArling
Warning This project is no longer under active development and the more featured and up-to-date fork is probably something more interesting for new comers. Also, IDA has announced an official support for collaborative reverse engineering session and one could also wait for this. Overview IDArling...
CVE-2026-45181
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation via argument injection, which allows attackers to place their code into a plugins directory if the victim uses an attacker-supplied .i64 file...
EUVD-2026-28942
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation via argument injection, which allows attackers to place their code into a plugins directry if the victim uses an attacker-supplied .i64 file...
CVE-2026-45181
Hex-Rays IDA Pro 9.2 and 9.3 prior to 9.3sp2 do not block Clang dependency-file generation, enabling argument-injection via attacker-supplied .i64 files to place code into a plugins directory. Root cause: missing validation in dependency-file generation. Impact: local attacker could achieve code ...
Hex-Rays IDA Pro 参数注入漏洞
Hex-Rays IDA Pro is a professional reverse-engineering tool developed by the Belgian company Hex-Rays. It is used for disassembly and program analysis. Versions of Hex-Rays IDA Pro from 9.2 to 9.3sp2 contained a parameter injection vulnerability. This vulnerability stemmed from the lack of...
CVE-2026-5420
A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.sort.sorting.games. Performing a manipulation of the argument AESIV/AESPASSWORD results in use of hard-coded...
EUVD-2011-1065
Malware in sbrugna...
EUVD-2011-1066
Malware in sbrugna...
EUVD-2011-1068
Malware in sbrugna...
EUVD-2011-1069
Malware in sbrugna...
EUVD-2014-9278
Malware in sbrugna...
EUVD-2011-1070
Malware in sbrugna...
EUVD-2011-1067
Malware in sbrugna...