darksword-kexploit

DarkSword 内核漏洞利用 用 Objective-C 重新实现。 据称支持 iOS 15.0 - 26.0.1。 偏移量针对 15.x 硬编码? 注意：此漏洞并非由我发现/泄露，泄露的原始来源是 https://github.com/htimesnine/DarkSword-RCE 此漏洞同样与 CELLEBRITE 完全无关，是我在一个空闲的下午写出来的，所有漏洞逻辑均来自原始仓库（除了一些让它在 iOS 15 上运行的小修复之外）。 如果你是 GitHub 员工并正在阅读本文：目前有大量虚假越狱工具在骗取用户钱财（只需搜索类似 pangu8.com...

cyclonedx-cli

root@kitploit: / / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

CVE-2026-87569

A flaw was found in Google Chrome. Missing authorization in the Views component allows a remote attacker, leveraging social engineering, to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page...

CVE-2026-87558

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Payments component, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by tricking a user into visiting a specially crafted HTML page,...

CVE-2026-87548

A flaw was found in the Installer component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper state validation could allow the attacker to bypass system access restrictions, potentially leading to...

CVE-2026-87528

A flaw was found in Google Chrome. This type confusion vulnerability, specifically in the Rust component, could allow a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page...

CVE-2026-87526

A flaw was found in Chromium. A remote attacker leveraging social engineering could exploit a use-after-free vulnerability in the Passwords component. This could potentially allow the attacker to execute arbitrary code outside the sandbox via user interface interaction...

CVE-2026-87527

A flaw was found in the WebGL component of Chromium-based browsers. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be triggered by a specially crafted HTML page, potentially leading to a complete compromise...

CVE-2026-87520

A flaw was found in Dawn, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. Exploitation occurs when a user visits a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-87474

A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...

CVE-2026-87470

A flaw was found in Google Chrome. Improper quantity validation in the Tint component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. Successful...

security-research

安全研究 漏洞研究文章。这里的每一条都对应一个已修复且公开跟踪的问题——没有纯理论性的发现。 Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack 已发布 文章| 目标| 类型| ID ---|---|---|--- 当安全补丁守护了错误的分支| GNOME libsoup| 越界读取（CWE-125）| CVE-2026-12478 待披露 其余文章将保留至对应问题修复且通过相关项目完成披露审批后发布。 其他致谢 CVE-2026-28962 — Apple WebKit。恶意网页内容导致敏感信息泄露。已在...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components 检测器 轻量级检测工具，用于识别 React Server Components 和 Next.js 应用 🎯 目的 RSC-Detect 是一款简单、专注的工具，用于识别使用 React Server Components RSC 和 Next.js 框架的网站。适用于： 安全研究人员 - 在评估过程中识别技术栈 Web 开发者 - 了解竞争对手使用的框架 DevOps 团队 - 审计 Web 资产以建立技术清单 赏金猎人 - 快速指纹识别目标应用 ⚡ 快速开始 本指南支持 Windows 和 Linux...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 解析：Slice ValueOf Fastpath 脆弱性の詳細 Array.slice 操作を介してメモリ開示を実現する WebKit JavaScript Core 脆弱性の包括的な解析と悪用 目次 エグゼクティブサマリー 脆弱性概要 研究環境のセットアップ 技術解析 悪用手順 主要な発見 リソースと参考文献 エグゼクティブサマリー このリポジトリには CVE-2016-4622 の包括的な解析が含まれています。これは WebKit の JavaScript Core エンジンにおける重要なメモリ開示脆弱性です。この脆弱性は...

CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...

POC-CVE-2026-65971

CVE-2026-65971 — 通过 sortDirection 在 Livewire PowerGrid 中实现 SQL 注入 针对 CVE-2026-65971 / GHSA-7fgc-3h6c-698r 的概念验证及完整技术文档， 这是 power-components/livewire-powergrid 中的一个 SQL 注入漏洞， 可通过公开的 Livewire 属性 sortDirection 触发。 | ---|--- CVE| CVE-2026-65971 GHSA| GHSA-7fgc-3h6c-698r 软件包|...

CVE-2026-87447

A flaw was found in the Network component of Google Chrome. This vulnerability, stemming from incorrect authorization, could allow a remote attacker to bypass the web origin policy. By leveraging social engineering and a specially crafted Chrome extension, an attacker could potentially gain...