pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 見た目は恐ろしい。Stagefright や PNG のバグの脆弱性を覚えていますか？CVE-2019-2107 では、デコーダ/コーデックが mediacodec ユーザーで動作し、適切に「細工された」動画（タイル有効 - pspps-i1tilesenabledflag）を使用することで、RCE が可能になる可能性があります。影響を受けるコーデックは HVEC（別名 H.265 および MPEG-H Part 2）です。exploit rce android stagefright cve 詳細情...

Banks: User-controlled prompt input can be parsed as privileged chat messages

Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...

GHSA-HMQ2-7HP6-7CRH Banks: User-controlled prompt input can be parsed as privileged chat messages

Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.1.3 Vulnerability Details CVEID:CVE-2026-59270 DESCRIPTION: Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.24. Vulnerability Details CVEID:CVE-2026-75063...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

CrossSiteContentHijacking

クロスサイトコンテンツ（データ）ハイジャッキング（XSCH）PoCプロジェクト ライセンス AGPLのもとで公開されています（詳細はLICENSEを参照）。 説明 このプロジェクトは、以下の概念実証（PoC）を提供するために使用できます。 安全でないポリシーファイル（crossdomain.xmlまたはclientaccesspolicy.xml）を持つWebサイトを、その内容を読み取ることによって悪用する。...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

GHSA-2GPF-2492-Q9JH PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

DAMM

DAMM Volatilityの上に構築されたオープンソースのメモリ分析ツールです。コミュニティに提供するための興味深い新しい技術の試験場となることを目的としています。これらの技術は、データ削減と専門知識の形式化を通じて調査プロセスを高速化するための試みです。 目次 機能 使い方 対応プラグイン 例 差分 一意IDの操作 フィルタリング 警告 最後に 機能 約30のVolatilityプラグインが約20のDAMMプラグインに統合されています（例：pslist、psxview、その他の要素は'processes'プラグインに統合されています） 1回の呼び出しで複数のプラグインを実行できます...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to...

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

GHSA-8R5X-FM3F-WHWJ Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection

Summary Coraza's JSON body processor converts nested JSON properties into dot-separated ARGSPOST names without escaping dots contained in literal property names. Two distinct JSON properties can therefore collapse into the same Coraza variable An unauthenticated attacker can place a malicious val...