Lucene search
+L

648 matches found

Kitploit
Kitploit
added 2026/09/11 4:47 p.m.5 views

magisk-renef

MagiskRenef Magisk / KernelSU / APatch モジュールで、renef(Android向け動的インストルメンテーションツールキット)を自動的にパッケージ化して実行します。 magisk-frida に着想を得ています。 要件 ルート化されたAndroidデバイス(Magisk / KernelSU / KernelSU Next / APatch) ARM64のみ — renefはARM64 Androidのみをサポート Android 10以上を推奨 インストール 1. リリース から最新の MagiskRenef-version.zip をダウンロード...

6AI score
SaveExploits0References6
OSV
OSV
added 2026/09/11 5:58 a.m.11 views

BIT-TOMCAT-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.42 through...

8.1CVSS5.8AI score0.00452EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 5:04 a.m.5 views

CVE-2021-25461

CVE-2021-25461 This is a repo with the Proof of Concept for the CVE discovered for the SAUSAGE Security Analysis of Unix domain Socket usAGE in Android paper that was accepted to EuroS&P 2022. I worked on this paper with Mounir Elgharabawy, the one who discovered the vuln and wrote the Proof of...

7.8CVSS7.4AI score0.00165EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:20 a.m.5 views

refreshing-mcp-tool

这还没有真正完成或就绪,但我想先把代码提交进来。 这基本上实现了 F5 的数据库协议 "mcp",它通过 UNIX 域套接字运行。这意味着你必须先获得 F5 设备上的 shell, 然后才能使用这些工具。通常你会将脚本输出 通过 socat 转发到 /var/run/mcp,然后将响应输入 mcp-parser.rb。 更多细节见下文。 脚本的简要说明: mcp-getloot.rb - 生成一条消息,用于导出用户和变量 mcp-privesc.rb - 生成一条消息,用于创建用户帐户 mcp-parser.rb - 解析来自 stdin 的 mcp 消息 mcp-mitm.rb -...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 6:02 a.m.8 views

CVE-2026-21636

CVE-2026-21636 - Node.js 权限模型 UDS/网络绕过 漏洞摘要 Node.js 权限模型 (--permission)旨在通过限制对文件系统、子进程、工作线程和网络的访问来对进程进行沙箱化。CVE-2026-21636 揭示了通过 undici/fetch(以及 net/tls)到 Unix 域套接字 和本地 TCP 地址的连接完全绕过了网络防护,即使未设置 --allow-net 也是如此。 受影响:Node.js v25(网络权限在披露时仍处于实验阶段)。 此 PoC 在 v22 上复现了该概念,其中可以观察到相同的绕过行为。 能够向在...

10CVSS6.8AI score0.00825EPSS
SaveExploits1References1
F5 Networks
F5 Networks
added 2026/09/08 7:23 a.m.10 views

K000163240: Multiple Apache Tomcat vulnerabilities

Security Advisory Description CVE-2026-65183 Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

9.8CVSS0.0083EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.8 views

CVE-2026-80818

In the Linux kernel, the following vulnerability has been resolved: i...

5.9AI score0.00168EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.4 views

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: d...

5.9AI score0.00156EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.3 views

CVE-2026-80806

In the Linux kernel, the following vulnerability has been resolved: e...

0.00173EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.4 views

CVE-2026-80843

In the Linux kernel, the following vulnerability has been resolved: x...

5.9AI score0.00195EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.6 views

CVE-2026-80858

In the Linux kernel, the following vulnerability has been resolved: f...

5.9AI score0.00145EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.3 views

CVE-2026-80792

In the Linux kernel, the following vulnerability has been resolved: i...

0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/05 3:02 p.m.7 views

OESA-2026-3592 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Improper Access Control,...

9.8CVSS5.4AI score0.0083EPSS
SaveExploits0References11
NVD
NVD
added 2026/09/04 4:17 p.m.7 views

CVE-2026-18567

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

4.7CVSS0.0007EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/04 4:10 p.m.20 views

CVE-2026-18567

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a TOCTOU race condition (CWE-367) involving a predictable Unix domain socket path in a world-writable directory. A local attacker with low privileges could exploit this to obtain information and cause minor availability impact, rated...

4.7CVSS5.2AI score0.0007EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/04 4:10 p.m.34 views

CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

4.4CVSS0.0007EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/04 4:10 p.m.7 views

EUVD-2026-71602

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

4.4CVSS5.2AI score0.0007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/04 4:10 p.m.12 views

CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

4.4CVSS5.2AI score0.0007EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/09/04 8:26 a.m.11 views

GHSA-W6WX-P63H-HR87 vulnerabilities

Vulnerabilities for packages: chromium...

5.3AI score
SaveExploits0
Chainguard
Chainguard
added 2026/09/04 8:26 a.m.12 views

GHSA-7JV8-R36R-863G vulnerabilities

Vulnerabilities for packages: chromium...

5.3AI score
SaveExploits0
Rows per page
Query Builder