electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

CrackAVFee

CVE 2022 3368 Vulnerability in Software Update Discovered by: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 Educational purposes only!...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...

CVE-2025-68921

CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

CVE-2026-63427

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

CVE-2026-63427

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

CVE-2026-63427

An authentication bypass vulnerability in Lenovo Software Fix allows a local authenticated user with low privileges to achieve arbitrary code execution with elevated privileges . The attack vector is local with low complexity and no user interaction required, yielding HIGH impact across confident...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

factual-rules-generator

factual-rules-generator Factual-rules-generator es un proyecto de código abierto que tiene como objetivo generar reglas YARA sobre software instalado a partir de un sistema operativo en ejecución. El objetivo del software es poder utilizar un conjunto de reglas contra evidencias forenses digitale...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

mud-visualizer

Visualizador de Descripción de Uso del Fabricante MUD Advertencia: mud-visualizer está actualmente en beta. Úselo bajo su propio riesgo. Esta herramienta se puede usar para visualizar los archivos MUD en formato JSON. Tabla de Contenidos Motivación Instalación Abstracciones MUD compatibles...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

sdnpwn

¿Qué es sdnpwn? sdnpwn es un kit de herramientas y un framework para probar la seguridad de las Redes Definidas por Software SDN. Para más información, consulta este artículo: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Instalación Primero descarga sdnpwn usando git root@kitploit: git clone...

kin

AI changed who writes code. Kin changes what they build on. Kin is an open-source code repository and version control system for people and AI agents. It keeps track of how the code fits together, so you can investigate what a change might affect. Functions, types, recorded relationships, and...

ROOT-APP-MAVEN-CVE-2025-55752 CVE-2025-55752 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-55752 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...