PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Electron 的应用程序，这些应用程序（间接）使用 PDF.js 进行预览功能。
☆12Jun 13, 2024Updated 2 years ago
Alternatives and similar repositories for cve-2024-4367-PoC-fixed
Users that are interested in cve-2024-4367-PoC-fixed are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从…☆11Jun 16, 2024Updated 2 years ago
- 该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。☆45Jul 5, 2024Updated 2 years ago
- NTPWEdit is a password editor for Windows NT based systems (like Windows 2000, XP, Vista, 7, 8, 10), it can change or remove passwords fo…☆22Oct 4, 2026Updated 2 weeks ago
- Use FAtiMA-Toolkit to create agents for Don't Starve Together.☆20Nov 21, 2018Updated 7 years ago
- Proof-of-Concept files for vulnerabilities found by Codean Labs☆29Oct 8, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Mobicore Trustlet/Driver Binary Loader for Ghidra☆13Jul 10, 2019Updated 7 years ago
- AndroidSlicer is a dynamic slicing tool, useful for a variety of tasks, from testing to debugging to security.☆14Jul 28, 2019Updated 7 years ago
- [漏洞复现] 全球首款利用PHP默认环境（XAMPP）的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。☆160Jul 21, 2024Updated 2 years ago
- ☆15Feb 20, 2025Updated last year
- various code☆12Mar 24, 2023Updated 3 years ago
- ☆13Feb 21, 2022Updated 4 years ago
- 反反frida调试☆23Apr 30, 2023Updated 3 years ago
- 漏洞测试与环境复现☆15Jul 5, 2017Updated 9 years ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 单页mysql注入环境自带数据仅需填账号密码无需其他复杂配置开箱即用。 自定义过滤/拦截规则进行bypass等测试，支持报错/联合/延时/布尔/时间/堆叠 的数值或字符注入☆16Dec 2, 2022Updated 3 years ago
- A character that plays itself☆22Jul 22, 2021Updated 5 years ago
- Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely☆80Jul 31, 2024Updated 2 years ago
- ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.☆36Apr 12, 2026Updated 6 months ago
- zsteg recreate by rust☆18Feb 9, 2026Updated 8 months ago
- MysqlHoneypot☆24May 4, 2022Updated 4 years ago
- ☆15Mar 7, 2019Updated 7 years ago
- 符合 OpenForensicRules 数字取证与应急响应信息采集规则格式规范的配置文件仓库☆30Jul 18, 2025Updated last year
- Exploit for CVE-2024-4885☆17Jul 8, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Program to emulate a pseudo-honeypot ssh server with some fun commands☆28Jan 3, 2022Updated 4 years ago
- SAMR修改域内主机密码☆10Feb 27, 2022Updated 4 years ago
- Android Debug Bridge (ADB) Protocol Parser for Wireshark☆32Jul 13, 2013Updated 13 years ago
- ☆37Aug 8, 2026Updated 2 months ago
- java 内存马系列 实现（Servlets 、组件、Agent）☆11Mar 7, 2022Updated 4 years ago
- 代码审计关键词扫描工具☆11Apr 29, 2024Updated 2 years ago
- A Krb5Server Docker Image very easy and simple to use.☆47Jul 18, 2024Updated 2 years ago
- PC微信小程序 wxapkg 解密☆19Aug 13, 2020Updated 6 years ago
- 一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight…☆16Aug 10, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- BlueStacks privilege escalation through VM backdooring☆21Jul 16, 2024Updated 2 years ago
- Java安全相关，目前主要是CC链研究☆10Sep 1, 2022Updated 4 years ago
- 批量域名筛查CDN☆12Nov 26, 2021Updated 4 years ago
- 一款支持检测web应用程序未授权访问缺陷的burp suite插件，可自定义配置检测字段以及返回包json数据分析☆13Apr 22, 2024Updated 2 years ago
- ☆10Jul 21, 2022Updated 4 years ago
- Early cascade injection PoC based on Outflanks blog post written in Rust☆68Dec 26, 2025Updated 9 months ago
- Tao（道）一款用于java语言函数调用关系生成的工具，致力于提高java代码审计效率。☆10Jul 2, 2024Updated 2 years ago