PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Electron 的应用程序，这些应用程序（间接）使用 PDF.js 进行预览功能。
☆12Jun 13, 2024Updated 2 years ago
Alternatives and similar repositories for cve-2024-4367-PoC-fixed
Users that are interested in cve-2024-4367-PoC-fixed are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从…☆11Jun 16, 2024Updated 2 years ago
- 该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。☆45Jul 5, 2024Updated 2 years ago
- NTPWEdit is a password editor for Windows NT based systems (like Windows 2000, XP, Vista, 7, 8, 10), it can change or remove passwords fo…☆28Oct 4, 2026Updated last month
- RoguePlanet Windows Defender Vulnerability.☆16Oct 14, 2026Updated 3 weeks ago
- Use FAtiMA-Toolkit to create agents for Don't Starve Together.☆20Nov 21, 2018Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Learning to Combine Local and Global Image Information for Contactless Palmprint Recognition☆11Dec 7, 2021Updated 4 years ago
- Kill Memshell By Arthas. 基于Arthas的内存马查杀工具☆36Oct 14, 2026Updated 3 weeks ago
- Code for the 2025 ACL publication "ConInstruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities"☆14Nov 24, 2025Updated 11 months ago
- Proof-of-Concept files for vulnerabilities found by Codean Labs☆30Oct 8, 2026Updated last month
- A Mobicore Trustlet/Driver Binary Loader for Ghidra☆13Jul 10, 2019Updated 7 years ago
- AES128_ECB_PKCS5Padding☆18Oct 29, 2019Updated 7 years ago
- 可自部署的 QQ AI 群聊伙伴，支持 JEV 语义判断、长期记忆、校园日常、多模态和 Web 管理后台。☆12Sep 20, 2026Updated last month
- AndroidSlicer is a dynamic slicing tool, useful for a variety of tasks, from testing to debugging to security.☆14Jul 28, 2019Updated 7 years ago
- EaTVul: ChatGPT-based Evasion Attack Against Software Vulnerability Detection☆18Jan 6, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 轻量、快捷 Windows 工具启动器，基于 Rust + GPUI☆16Updated this week
- various code☆12Mar 24, 2023Updated 3 years ago
- 轻量取证工具喵~☆17Nov 4, 2026Updated last week
- [漏洞复现] 全球首款利用PHP默认环境（XAMPP）的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。☆162Jul 21, 2024Updated 2 years ago
- ☆13Feb 21, 2022Updated 4 years ago
- 反反frida调试☆23Apr 30, 2023Updated 3 years ago
- 漏洞测试与环境复现☆15Jul 5, 2017Updated 9 years ago
- ☆15Feb 20, 2025Updated last year
- Chinese Flyff emulator☆16Nov 18, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 单页mysql注入环境自带数据仅需填账号密码无需其他复杂配置开箱即用。 自定义过滤/拦截规则进行bypass等测试，支持报错/联合/延时/布尔/时间/堆叠 的数值或字符注入☆16Dec 2, 2022Updated 3 years ago
- Skin changer for Teamfight Tactics (TFT)☆24Dec 8, 2023Updated 2 years ago
- Deep Networks with Recurrent Layer Aggregation☆26Nov 10, 2021Updated 5 years ago
- A character that plays itself☆22Jul 22, 2021Updated 5 years ago
- ☆21Apr 26, 2020Updated 6 years ago
- ☆15Mar 7, 2019Updated 7 years ago
- Developer tools for inspecting and debugging GPUI applications☆30Updated this week
- [T-IFS'24] Audio Multi-view Spoofing Detection Framework Based on Audio-Text-Emotion Correlations☆31Jul 31, 2024Updated 2 years ago
- 代码审计关键词扫描工具☆11Apr 29, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- zsteg recreate by rust☆18Feb 9, 2026Updated 9 months ago
- Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely☆80Jul 31, 2024Updated 2 years ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- 批量域名筛查CDN☆12Nov 26, 2021Updated 4 years ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- 存放 MemShellParty 或其他场景下需要使用的 jar 包，仅用于学习交流☆11Jun 12, 2026Updated 4 months ago
- BlueStacks privilege escalation through VM backdooring☆21Jul 16, 2024Updated 2 years ago
Are these results useful?