CVE-2019-9053

CVE-2019-9053 Эксплойт CVE-2019-9053 для Python 3 Последнее тестирование: 28-12-2021 Протестировано на: Python 3.10.1 Исходный код эксплойта: https://www.exploit-db.com/exploits/46635 Пользователи несут полную ответственность за любые действия, выполненные с помощью этого инструмента. Если эти...

CVE-2021-21017

CVE-2021-21017 またしてもAdobe Readerのバイトオーダーマークの問題 : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 &&...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 메타 명령 필터 명령 실행 요약 pgAdmin의 Issue 9320 수정의 일부로 도입된 PLAIN 복원 메타 명령 필터는 SQL 파일이 UTF-8 BOMEF BB BF 또는 다른 특수 시퀀스로 시작할 때 메타 명령을 감지하지 못합니다. 구현된 필터는 hasmetacommands 함수를 사용하며, 정규 표현식으로 원시 바이트를 스캔합니다. 정규식은 해당 바이트를 무시 가능한 것으로 처리하지 않으므로 !와 같은 메타 명령이 감지되지 않습니다. pgAdmin이 --file과 함께 psql을 호출하면...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE-Scanner Ein umfassender Schwachstellenscanner für CVE-2025-13780 , eine Remote-Code-Ausführungs-Schwachstelle RCE in pgAdmin 4 Versionen ≤ 8.14. 🔍 Details zur Schwachstelle Die Schwachstelle befindet sich in der Wiederherstellungs -Funktion von pgAdmin 4. Die...

CVE-2023-32315-EXPLOIT

CVE-2023-32315 - Openfire Authentifizierungsumgehung Dieses Repository hebt ein schwerwiegendes Sicherheitsproblem hervor, das verschiedene Versionen von Openfire betrifft. Openfire, ein plattformübergreifender Echtzeit-Kollaborationsserver, der das XMPP-Protokoll nutzt und von der Ignite...

NextRce

NextRce - Strumento di exploit RSC per Next.js CVE-2025-55182 Scanner di vulnerabilità avanzato ed exploiter per Next.js App Router Sviluppato daMitsec 🔥 Nuova funzionalità: Modalità di bypass WAF UTF-16LE I payload standard che contengono parole chiave come childprocess o execSync vengono spesso...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2023-40031

CVE-2023-40031 Análise e reprodução da vulnerabilidade de estouro de buffer de heap no Notepad++ CVE-2023-40031 Visão geral da vulnerabilidade O Notepad++ é um conhecido editor de código aberto, executado no sistema Windows, que suporta várias linguagens de programação. Recentemente, pesquisadore...

PT-2026-83374

Name of the Vulnerable Software and Affected Versions MariaDB Connector/J versions prior to 2.7.14 MariaDB Connector/J versions prior to 3.3.5 MariaDB Connector/J versions prior to 3.4.3 MariaDB Connector/J versions prior to 3.5.9 Description The connector encodes and decodes protocol text and...

PT-2026-83375

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver encodes and decodes all character data assuming the connection character set is UTF-8. A server can announce a mid-session change to the character set client variable throu...

CVE-2021-4034

CVE-2021-4034 root@kitploit: $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2021-21017

CVE-2021-21017 Non è un altro bug del Byte Order Mark di Adobe Reader : root@kitploit: Plugin IA32, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Laborumgebung ⚠️ Haftungsausschluss Dieses Labor dient ausschließlich Bildungs- und Forschungszwecken. Verwenden Sie NICHT Informationen oder Techniken aus dieser Anleitung auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche Genehmigung zum Testen haben. Die...

CVE-2026-21876

CVE-2026-21876 Bypass do WAF OWASP CRS Container docker CVE-2026-21876 + PoC mínimo. Gostaria de agradecer separadamente a @airween e @fzipi pela resposta rápida! A correção da vulnerabilidade ficou pronta em muito pouco tempo. PoC root@kitploit: POST /submit HTTP/1.1 Host: localhost User-Agent:...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text.

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text. CVE-2026-56852 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handli...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed a potential out-of-bounds write issue in getfileallinfo for compound requests. When a compound request consists of QUERYDIRECTORY + QUERYINFO FILEALLINFORMATION, and the first command consumes nearly the entire...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

In xmltokimpl.c within Expat also known as libexpat, before version 2.4.5, there was no proper validation of encoding. This meant that there were no checks to determine whether a UTF-8 character was valid in a particular context...

Astra Linux – Vulnerability in libtomcrypt

In LibTomCrypt version 1.18.2, the derdecodeutf8string function located in derdecodeutf8string.c does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service such as out-of-bounds reads and crashes or to read information from other...

Astra Linux – Vulnerability in pcre2

A out-of-bounds read was discovered in PCRE before version 10.34, where the pattern \X was JIT-compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, as it could allow an attacker to cause the...