opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

aimp

AIMP — Protocolo de Malla de IA Un protocolo de red experimental y sin servidor para la sincronización de estado resiliente entre agentes autónomos en redes fragmentadas y de bajo ancho de banda. Construido sobre Merkle-CRDTs e identidad criptográfica — sin autoridad central, sin DNS global,...

idacode

IDACode IDACode 让您无需离开 Visual Studio Code 即可轻松在 IDA 环境中执行和调试 Python 脚本。该 VS Code 扩展可在市场中找到。 IDACode 仍处于非常早期的阶段，可能会存在错误。如果您遇到任何问题，请提交新的 issue。 特点 速度 ：快速创建和执行脚本。 调试 ：随时附加 Python 调试器。 兼容性 ：IDACode 不要求您以特定方式修改脚本。所有脚本均可直接在 IDA 中执行，无需更改。 模块化 ：IDACode 不过度依赖线程同步的安全包装器，这让您可以随时从任何路径导入任何模块。相反，IDACode 将脚本执行线...

ret-sync

ret-sync ret-sync 代表逆向工程工具同步（Reverse-Engineering Tools SYNChronization）。它是一组插件，用于将调试会话（WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg）与反汇编器（IDA/Ghidra/Binary Ninja）同步。其核心理念很简单：从静态分析和动态分析两个世界中各取所长。 调试器和动态分析为我们提供： 局部视图，具有实时动态上下文（寄存器、内存等） 内置的特殊功能/API（例如：WinDbg 的 !peb、!drvobj、!address 等） 反汇编器和静态分析为我们提供：...

syncord

Syncord root@kitploit: $$\ $$ | $$$$$$$\ $$\ $$ $$$$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$$ | $$ |$$ | $$ |$$ $$\ $$ |$$ $$\ $$ $$\ $$ $$ | $$$$$$\ $$ | $$ |$$ | $$ |$$ / $$ / $$ |$$ | |$$ / $$ | $$\ $$ | $$ |$$ | $$ |$$ | $$ | $$ |$$ | $$ | $$ | $$$$$$$ |$$$$$$$ |$$ | $$ |$$$$$$$\ $$$$$$ |$$...

dsync

dsync Plugin de IDAPython que sincroniza las vistas de código descompilado y desensamblado. Consulte los comentarios en el código fuente para más detalles. Requiere IDA Pro 7.3 N.B.: Puede que quieras usar la función de sincronización oficial introducida con IDA 7.3 en su lugar...

CVE-2024-50623

CVE-2024-50623 Cleo 无限制文件上传与下载漏洞利用演示 CVE-2024-50623 任意文件写入 root@kitploit: python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // ||...

tomcat-cluster-session-sync-exp

工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 tomcat cluster sync-session 利用exp 这是一个tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。 使用 先编译出jar包： root@kitploit: mvn clean compile assembly:assembly 生成jar包存在于target目录下 使用，例： root@kitploit: ja...

CVE-2026-76672

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

CVE-2026-76672

CVE-2026-76672 affects the HPE Networking EdgeConnect SD-WAN Orchestrator . An authenticated remote attacker holding only read-only privileges can send a specially crafted request to the cache synchronization endpoint , leading to disclosure of sensitive third-party API tokens and credentials. Su...

CVE-2026-90971

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...

CVE-2026-90971

CVE-2026-90971 is a Server-Side Request Forgery (SSRF) vulnerability in the VMware synchronization feature of Devolutions Server 2026.2.16 and earlier . A low-privileged authenticated user can submit a crafted connection definition for datacenter discovery, enabling them to obtain other users' cr...

CVE-2026-85892

CVE-2026-85892 is a race condition vulnerability in Microsoft Edge (Chromium-based) , caused by concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally , with the scope changed to allow full compromise of co...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Drivers: USB: Host: Fixed a deadlock in oxubussuspend There is a deadlock in oxubussuspend, as shown below: Thread 1 | Thread 2 | timeraction oxubussuspend | modtimer spinlockirq //1 | Wait for a while ... | oxuwatchdog...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ftrace: Fixed a use-after-free issue related to dynamic ftraceops. KASAN reported a use-after-free when using ftrace. It was discovered that perf registered two ftrace operations with the same content, both being dynamic. Afte...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: veth: The GRO flag is cleared when XDP is disabled, even when the device is disabled. The NETIFFGRO flag is set automatically when XDP is enabled, because both features use the same NAPI mechanism. The logic for clearing the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential hang occurred in nilfsdetachlogwriter. Syzbot reported a potential hang during nilfsdetachlogwriter called when nilfs2 unmounts the file system. Analysis revealed that this issue arises because nilfssegctorsyn...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Created a persistent INTx handler. There exists a vulnerability where the eventfd for INTx signaling can be deconfigured. This causes the IRQ handler to be unregistered, but it still allows eventfds to be signaled with ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fixed a use-after-free bug in smpexecutetasksg When executing an SMP task fails, the smpexecutetasksg function calls deltimer to delete the “slowtask-timer” timer. However, if the timer handler sastaskinternaltimedo...

CVE-2022-32832

CVE-2022-32832 针对在 iOS 15.6 中修补的 CVE-2022-32832 漏洞的概念验证与详细分析 CVE-2022-32832 是 AppleAPFSUserClient::methodDeltaCreateFinalize 外部方法（选择器 49）中的一个漏洞。以下是补丁前的反编译代码： root@kitploit: int64 cdecl AppleAPFSUserClient::methodDeltaCreateFinalizeAppleAPFSUserClient this, void a2, IOExternalMethodArguments args...