CVE-2026-107908

FalkorDB versions prior to 4.20.0 are vulnerable to a heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c). The flaw occurs because the handler uses ASSERT() to validate the chunk size, which is omitted in release builds. This allows a remote unauthenticated attack...

EUVD-2026-95485

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

anubis

Anubis d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis est un outil...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

PulseAPK-Core

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 PulseAPK est une interface graphique professionnelle pour l’ingénierie inverse Android et...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

rdroid

Ce projet n'est plus maintenu pour le moment, mais dès que j'aurai du temps dans les prochains mois, probablement, il sera corrigé pour fonctionner. rdroid Gérez à distance votre téléphone Android, alias RAT ! Historique ! J'ai travaillé sur ce projet au lycée, en 2011-2012. Comme je ne connaissa...

PhantomCtx

PhantomCtx PhantomCtx est un outil qui automatise le détournement de contexte d'activation dans le but de charger une DLL arbitraire dans la grande majorité des exécutables signés par exemple Microsoft, Adobe, Mozilla. Le chargeur se présente comme une alternative moderne au détournement et au...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

androidqf

androidqf androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. androidqf is intended to provide a simple and portable cross-platform utility to quickly acquire data from Android devices. It is similar in functionality to...

Girsh

Girsh Reverse Shell Interactif en Golang Qui ne s'est jamais ennuyé à taper manuellement les quelques lignes pour passer d'un reverse shell à un reverse shell interactif complet spawn tty, stty size..., stty raw -echo ou à taper la commande pour utiliser ConPTY. Description Avec Girsh, lancez-le...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

kerbrute

Kerbrute Un outil pour bruteforcer et énumérer rapidement des comptes Active Directory valides via la pré-authentification Kerberos Téléchargez les derniers binaires depuis la page des versions pour commencer. Contexte Cet outil est né de quelques scripts bash que j'ai écrits il y a quelques anné...

avscript

Interpréteur JavaScript de l'Antivirus Avast NOTE : Le 03/11/2020, Avast a annoncé avoir décidé de désactiver cet interpréteur mondialement ! Le processus principal de l'antivirus Avast s'appelle AvastSvc.exe et s'exécute en tant que SYSTEM. Ce service charge le moteur antivirus de bas niveau et...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

findom-xss

FinDOM-XSS FinDOM-XSS est un outil qui vous permet de trouver rapidement des vulnérabilités XSS basées sur le DOM possibles et/ou potentielles. Installation $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dépendances : LinkFinder Utilisation Pour exécuter l'outil su...