sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

flare-vm

FLARE-VM Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine VM. FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on t...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2018-17552

CVE-2018-17552 View doc here https://docs.google.com/document/d/1Enu58910099gFJ24AGkOtnJoQgtAibm2/edit?usp=sharing&ouid=116617095858459545855&rtpof=true&sd=true...

CVE-2026-91081 Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpoint

Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID. Attackers can exploit DNS time-of-check-time-of-use race conditions and shared address space bypasses t...

CVE-2026-91081

Docs by Suitenumerique (versions through 5.6.1 ) contains a server-side request forgery (SSRF) vulnerability in the cors-proxy endpoint. The root cause involves DNS time-of-check-time-of-use (TOCTOU) race conditions and shared address space bypasses , allowing anonymous attackers to forge outboun...

EUVD-2026-77716

Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID. Attackers can exploit DNS time-of-check-time-of-use race conditions and shared address space bypasses t...

kismet-docs

DEPRECATED This repo is now merged into the kismet-web-docs repo, and all future changes should go there. The new site engine uses Hugo, and a number of the documentation parts have been converted to YAML data with templates...

CVE-2018-6643

CVE-2018-6643 CVE-2018-6643 Infoblox NetMRI 7.1.1 hxxp::/xxx.abc/api/docs/index.php?query=555"...

CVE-2026-81782

Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...

EUVD-2026-75515

Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...

CVE-2026-81782

WordPress WP Docs plugin versions up to 2.3.1 contain a Cross-Site Scripting (XSS) vulnerability accessible to Subscriber-level users. The CVSS v3.1 score is 6.5 (Medium) , with a network attack vector, low complexity, required user interaction, and a changed scope resulting in low impact on conf...

CVE-2026-81782 WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...

WordPress WP Docs plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin WP Docs versions = 2.3.3...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

CVE-2026-82710

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, dbmate, osv-scanner, tflint, vcluster, falcosidekick, k8sgpt, k8sgpt-operator, guac, terraform-docs, gomplate, kubernetes-csi-driver-hostpath, opentelemetry-collector-contrib, certificate-transparency, spegel, step-ca, hubble-ui, k3d,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-operator, cluster-api-helm-controller, chartmuseum, helm-push, helm-docs, zot, flux-helm-controller, cert-manager-cmctl, trivy, rancher-helm, flux-source-controller, kots, k9s, k8ssandra-client, cilium-cli, pluto, flux, zarf, kubescape, chart-testing, eksctl, tw...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, cluster-api-helm-controller, chartmuseum, k8sgpt, envoy-gateway, helm-push, helm-docs, linkerd2, zot, kargo, flux-helm-controller, istio, rancher-fleet, cert-manager-cmctl, trivy, rancher-helm, flux-source-controller, kots, k9s, k8ssandra-client,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, opencost, osv-scanner, kubernetes-csi-external-resizer, wuzz, grafana-operator, gatus, harbor-registry, sriov-network-device-plugin, rancher-machine, dkron, undock, rancher-system-agent, aws-signer-notation-plugin,...