aydinnyunus

name	description
loop	Documents /loop-style recurring reminders and Claude Code's built-in scheduler. In Cursor: /loop [interval] <message> adds a crontab entry (macOS + Linux); one-shot uses background sleep + notify. List/cancel via crontab. In Claude Code: use built-in /loop. Use when the user asks for /loop, scheduled reminders, or recurring prompts.

/loop: recurring reminders (Cursor + Claude Code)

Using /loop in Cursor (crontab, no Claude Code required)

When the user asks for a recurring reminder in Cursor (e.g. /loop 5m remind me to stand up or loop every 1m remind me to stand up), do not ask them to use Claude Code. Implement it with crontab so reminders persist across sessions and work on macOS and Linux.

aydinnyunus

; Redis-like Key-Value Store in x86-64 Assembly for macOS
; NASM syntax - Basic Redis server with SET, GET, DEL, PING commands

extern _socket, _bind, _listen, _accept, _read, _write, _close, _exit, _printf, _htons
extern _strcmp, _strlen, _strncmp, _sprintf

section .data
    server_msg db "Redis-like server starting on port 6379...", 10
               db "Connect with: redis-cli -p 6379", 10
               db "Supported: PING, SET key value, GET key, DEL key, QUIT", 10, 0

aydinnyunus

#!/usr/bin/env python3
import os
import uuid
from pathlib import Path

# Change to PoC directory
poc_dir = Path(__file__).parent
os.chdir(poc_dir)

# Generate random exploit file name

aydinnyunus

# Kullanım:
# python cnn_main.py dosya.png
#
# NOT:
# - İlk çalıştırmada MNIST veri seti indirilecek ve CNN modeli eğitilecek.
# - Bu yüzden internet bağlantısı gereklidir.
# - Gerekli kütüphaneler:
#   python -m venv venv
#   source venv/bin/activate  # Linux/macOS
#   venv\Scripts\activate     # Windows

aydinnyunus

from fastmcp import FastMCP
import json
import platform
import subprocess
import requests

# fastmcp run main.py --transport sse --port 8000

"""
{

aydinnyunus

# Kullanım:
# python main.py dosya.png
#
# NOT:
# - İlk çalıştırmada MNIST veri seti indirilecek ve model eğitilecek.
# - Bu yüzden internet bağlantısı gereklidir.
# - Gerekli kütüphaneler:
#   python -m venv venv
#   source venv/bin/activate  # Linux/macOS
#   venv\Scripts\activate     # Windows

aydinnyunus

from flask import Flask, request
import sqlite3

app = Flask(__name__)

# Set up database
def init_db():
    conn = sqlite3.connect('users.db')
    c = conn.cursor()
    c.execute('CREATE TABLE IF NOT EXISTS users (username TEXT, password TEXT)')

aydinnyunus

1. Overview

A security vulnerability has been discovered in Akaunting, an open-source online accounting software. The issue allows an attacker to install paid applications for free, leading to further exploitation, including remote code execution (RCE) and local privilege escalation (LPE). This report outlines the details of the vulnerability, its impact, and potential mitigation steps.

---

2. Description of the Vulnerability

2.1 Business Logic Bug in Application Purchase System

Akaunting offers an App Store where users can purchase and install various applications to extend functionality. A flaw in the request processing allows an attacker to:

• Modify request parameters (name, version, path) to install paid applications for free.

aydinnyunus

CVE Description: File Upload Bypass in NestJS Due to Insufficient MIME Type Validation

CVE-2024-29409
File Upload Bypass Vulnerability in NestJS file-type.validator.ts

Vulnerability Summary: A file upload bypass vulnerability exists in the file-type.validator.ts implementation within the NestJS framework (versions prior to 10.x.x) that allows attackers to bypass MIME type checks during file uploads. The flaw arises from an incorrect or insufficient validation of the Content-Type header and the actual file content type. This allows an attacker to upload files with a mismatched Content-Type, leading to possible security issues, such as remote code execution, file disclosure, or data exfiltration.

Vulnerable Component:

• Component: @nestjs/common

aydinnyunus

Vulnerability Report: Bypass in isPrivate() Function

CVE-2024-28607

Summary: An issue in the isPrivate() function of the NPM ip-utils package (version 2.4.0 and before) allows an attacker to bypass private IP detection, potentially leading to security risks such as unauthorized access, SSRF, or information leakage.

• https://github.com/librasean/IP-Utils/blob/4f88799f94f21efe6ea9135129ab2bbeb0c58edc/src/IsPrivate.ts#L4

---