CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

EUVD-2026-96308

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

CryptoLyzer

CryptoLyzer est un analyseur rapide, flexible et complet de protocoles cryptographiques serveur TLS, SSL, SSH, IKE, DNSSEC et de paramètres associés en-têtes HTTP, enregistrements DNS et un générateur d'empreintes JA3, HASSH avec des interfaces API et CLI. Utilisez CryptoLyzer lorsque vous devez...

defcon33_silence_kill_edr

🛡️ DEFCON Workshop: Ставим EDR на место 💀 Убийство и затыкание EDR-агентов как настоящий злоумышленник Настройка Убийство EDR Кастомный обход EDR 🎯 Что вы будете делать Каждому студенту будет предоставлена собственная лабораторная среда, чтобы: 🔍 Исследовать живой EDR-агент: обнаружить его хуки,...

CVE-2026-103513

The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...

EUVD-2026-96307

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103501

A heap buffer overflow exists in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode from a byte buffer or stream, the software fails to validate the input coupon count against a fixed internal buffer capacity of 8 entries. ...

CVE-2026-103501 Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...

EUVD-2026-96306

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...

CVE-2026-104051-pictshare-info-disclosure

CVE-2026-104051 — PictShare의 info API를 통한 민감 정보 노출 허가된 보안 연구. 방어 및 교육 목적으로만 사용하는 PoC입니다. PictShare의 /api/info/ 엔드포인트는 업로드된 모든 파일에 대한 전체 원시 메타데이터 객체 를 반환합니다 — 여기에는 삭제를 승인하는 비밀 deletecode, 그리고 업로더의 IP, User-Agent, 원격 포트, SHA-1이 포함됩니다. 파일의 공개적으로 보이는 해시를 알고 있는 인증되지 않은 공격자는 해당 파일의 deletecode를 읽은 다음 호스...

Wonka

Wonka 🍫 "우리는 음악을 만드는 자들이며, 꿈을 꾸는 자들입니다." - 윌리 웡카 Wonka 는 LSA로컬 보안 기관 캐시에서 Kerberos 티켓을 추출하는 달콤한 Windows 도구입니다. 보안 연구 및 침투 테스트를 위한 티켓 찾기와 같습니다! 🎫 ✨ 기능 🔐 시스템 가장 - 상승된 권한으로 실행 시 자동으로 SYSTEM이 되어 LSA에 접근 👤 권한 인식 - 표준 사용자는 신뢰할 수 없는 LSA 연결을 통해 자신의 세션만 덤프하며, SYSTEM 가장이 필요하지 않음 📋 세션 검색 - 모든 활성 로그온 세션 찾기...

SSRFmap

SSRFmap SSRF часто используются для воздействия на другие сервисы; этот фреймворк предназначен для лёгкого поиска и эксплуатации таких сервисов. SSRFmap принимает на вход файл запроса Burp и параметр для фаззинга. Server Side Request Forgery SSRF — это уязвимость, при которой злоумышленник...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation stable version...

bbot

BEE·bot est un scanner polyvalent inspiré par Spiderfoot, conçu pour automatiser vos missions de Recon , de Bug Bounty et votre ASM ! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 Un scan BBOT en temps réel - visualisation avecVivaGraphJS...

CVE-2025-22963

Обзор Уязвимость межсайтовой подделки запроса CSRF в Teedy версиях = v1.11 позволяет удалённым злоумышленникам принудить конечного пользователя изменить свои пользовательские данные имя пользователя, пароль и т. д. в веб-приложении, в котором он в настоящее время аутентифицирован. Уязвимость...

octosuite

Terminal-based toolkit for GitHub data analysis. $ octosuite user torvalds from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation pip install octosuite Usage TUI Interactive Launch the interactive termina...

octosuite

Boîte à outils en terminal pour l'analyse de données GitHub. $ octosuite user torvalds from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation pip install octosuite Utilisation TUI Interactif Lancez...

hindsight

Hindsight Analyse forensic de l'historique Internet pour Google Chrome/Chromium et Mozilla Firefox Hindsight est un outil gratuit d'analyse des artefacts web. Il a commencé par l'historique de navigation du navigateur Google Chrome, s'est étendu à la prise en charge d'autres applications basées s...