CVE-2022-30190

CVE-2022-30190 El script proviene de https://github.com/JohnHammond/msdt-follina, solo lo hago simple para usarlo y este script tiene como objetivo generar el payload. Para más información, consulte el enlace de John Hammond...

CVE-2024-3094-XZ-Utils-Check

JB-Network - check-xz.sh Utileria para revisar si tienes una version vulnerable de acuerdo al CVE-2024-3094. Instalación Para utilizarlo, entra a tu terminal y corre: root@kitploit: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh ¿Como ejecutar?...

high-pcode

Salida de Pcode de alto nivel PcodeAST en Ghidra Ghidra utiliza una representación independiente del procesador llamada Pcode. Es fácil de obtener y trabajar con ella en scripts Instruction.getPcode. Es menos conocido que el descompilador expone una representación de Pcode de mayor nivel. El...

EUVD-2026-15459

textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to childprocess.exec in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequat...

textract is vulnerable to OS Command Injection

textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to childprocess.exec in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequat...

PT-2024-15721 · Unknown · Deepfacelab

Name of the Vulnerable Software and Affected Versions: DeepFaceLab pretrained DF.wf.288res.384.92.72.22 Description: A problematic vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. The issue affects an unknown function of the file mainscripts/Util.py and leads to...

USN-65-1: Apache utility script vulnerability

Javier Fernández-Sanguino Peña noticed that the "checkforensic" script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...