vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install root@kitploit: $ gem...

drinkme

drinkme drinkme is a shellcode test harness. It reads shellcode from stdin and executes it. This allows pentesters to quickly test their payloads before deployment. Formats drinkme can handle shellcode in the following formats: "0x" "\x" "x" "" For example, NOP could be represented as any of...

CVE-2025-9491_POC

CVE-2025-9491 LNK 難読化 PoC Windows ショートカット（.lnk）ファイルの脆弱性（ZDI-CAN-25373 / CVE-2025-9491）を実証する概念実証ツールです。このツールは、空白文字パディングを利用して悪意のあるコマンドライン引数を .lnk ファイル内に隠す方法を示します。 このツールは教育目的および許可されたセキュリティテストの目的のみで提供されています。 コンピュータシステムへの不正アクセスは違法です。このツールは、自分が所有しているか、明示的なテスト許可を得ているシステムでのみ使用してください。 目次 説明 脆弱性の詳細 インストール...

Astra Linux – Vulnerability in tar

GNU Tar version 1.34 has a one-byte out-of-bounds read operation that allows for the use of uninitialized memory during a conditional jump. Exploitation to alter the control flow has not been demonstrated. The issue occurs in the fromheader section of the list.c file, due to a V7 archive where...

Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem before version 3.3.2 had some DoS vulnerabilities when parsing XML that contained many special characters, such as whitespace characters, , , and . The REXML gem versions 3.3.3 or later include patches to fix these vulnerabilities...

AZL-100181 CVE-2026-89497 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

Linux Distros Unpatched Vulnerability : CVE-2026-88056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...

CVE-2026-88056

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

CVE-2026-88056

Angular's @angular/platform-server is vulnerable to SSRF and cross-origin credential disclosure prior to versions 20.3.30, 21.2.22, and 22.1.4 . The root cause is that the resolveUrl and parseUrl utilities invoked String.prototype.trim(), which strips leading Unicode whitespace (e.g. U+00A0, U+FE...

CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

EUVD-2026-75675

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

CVE-2026-88056

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

CVE-2023-24329-lab

CVE-2023-24329 — パーサーの差異を学ぶラボ 教育目的のみ。 このラボは、安全で隔離された環境で実際の脆弱性を示すために存在します。自分が所有していないシステムに対して実行しないでください。意図的に壊れたフィルターコードを本番システムで再利用しないでください。 CVE-2023-24329 の自己完結型 Docker ラボです。この脆弱性は Python の urllib.parse.urlparse におけるパーサーの差異であり、Python 3.11.4 で URL スキームやホストのフィルターをバイパスすることを可能にします。 このラボでは、file:// URL...

CVE-2023-24329-Exploit

简介 URL 解析函数专注于将 URL 字符串拆分为其组成部分，或将 URL 组成部分组合成 URL 字符串。 urllib.parse.urlparse 简单来说 ，urllib.parse 用于解析 URL，我们可以通过在 URL 前添加空格来绕过它。这发生在 Python 3.11.4 及更早版本中。 PoC 让我们分解 example.py 以下是一组你不应访问的网站： root@kitploit: blockedlist = "http://example.com/", "http://example2.com/" 此函数检查网站是否在阻止列表中，如果在阻止列表中，则应返回 U...

PT-2026-89690

Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...

CVE-2026-33033-PoC

CVE-2026-33033 PoC 通过 base64 空白字符 CPU 放大在 DjangoMultiPartParser 中实现拒绝服务 单个 2.5 MB 的 HTTP 请求即可占用 Django worker 约 5 秒 ，相比同大小的正常请求实现了 约 2,100 倍 CPU 放大 。无需任何身份验证。 受影响版本 该漏洞已在 Django 6.0.4 安全版本（2026 年 4 月 7 日）中修复，并已向后移植到所有受支持的版本分支。 分支| 受影响| 已修复 ---|---|--- Django 6.0.x| CVE-2026-33033：MultiPartParser ...

CVE-2026-73276

A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...