CallstackSpoofingPOC

إخفاء تتبع الاستدعاءات + استدعاءات النظام غير المباشرة POC يتكوّن هذا المشروع من برنامج قاذف dropper بسيط مكتوب بلغة C++ يقوم بالحقن الذاتي، ويركّز على إثبات مفهوم POC للتهرب من حلول كشف الاستجابة للنقاط الطرفية EDR. لتنفيذه، جمعت بين استخدام Windows Thread Pooling لإخفاء تتبع الاستدعاءات call...

sandbox

Concave AI Sandbox AI कोड को सुरक्षित, तेज़ और अविश्वसनीय रूप से चलाएँ Firecracker माइक्रोवीएम पर आधारित एक स्व-होस्ट करने योग्य कोड निष्पादन सैंडबॉक्स प्लेटफ़ॉर्म। स्नैपशॉट-आधारित वार्म पूलिंग के साथ 200 मिलीसेकंड से कम की स्टार्टअप समय। परिचय Concave अविश्वसनीय कोड चलाने के लिए सुरक्षित और पृथक...

craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

cp30_XXE_partial_fix

c3p0 c3p0 هي مكتبة ناضجة وعالية التزامن لتجميع اتصالات JDBC، مع دعم للتخزين المؤقت وإعادة استخدام PreparedStatements. وهي مرخّصة بموجب LGPL v.2.1 أو EPL v.1.0، وفق اختيارك. تتم صيانة c3p0 الآن على github. تتوفر c3p0 كتبعية مُدارة في مستودع البرمجيات مفتوحة المصدر لـ Sonatype، ضمن groupId:...

propox

Propox 🛡️🚀 Propox एक उच्च-प्रदर्शन, सुरक्षित और अवलोकनीय HTTP/HTTPS प्रॉक्सी है जो Rust में लिखा गया है। इसे उच्च-थ्रूपुट ट्रैफ़िक को संभालने के लिए डिज़ाइन किया गया है, साथ ही उन्नत सुरक्षा तंत्रों का उपयोग करके दुरुपयोग करने वाले क्लाइंट से सक्रिय रूप से बचाव करता है। ✨ मुख्य विशेषताएँ 🚀 अत्यधिक...

CVE-2025-67733

إثبات مفهوم حقن بروتوكول RESP إثبات مفهوم يوضح ثغرة حقن بروتوكول RESP عبر رسائل خطأ سكربت Lua في Valkey/Redis. الملفات backend.py واجهة خلفية Flask تحاكي تطبيق ويب مع اتصال Valkey مشترك تجميع الاتصالات. النقاط النهائية: الطريقة| النقطة النهائية| الوصف ---|---|--- POST| /api/user/role| تعيين دور...

CVE-2025-29927

CVE-2025-29927 Next.js CVE-2025-29927 के लिए Async Python स्कैनर। बड़ी URL सूचियों को कुशलतापूर्वक संसाधित करने, कमजोरियों का पता लगाने और परिणामों को सहेजने के लिए aiohttp & aiofiles का उपयोग करता है। तेज़ प्रदर्शन के लिए कनेक्शन पूलिंग, कैशिंग और खंडित प्रसंस्करण की सुविधाएँ।...

Rocky Linux 10.1 [CIQ] Security Update: mysql8.4 / mysql8.4-common / mysql8.4-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_4162)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264162 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql:...

AlmaLinux 9.6 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773050223)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773050223 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.44...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_6391)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266391 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 9 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_5640)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20265640 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 9 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (crlsa-2026_4828)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264828 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlsa-2022_0496)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220496 advisory. dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service CVE-2022-219862 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-5.0 / aspnetcore-targeting-pack-5.0 / etc (crlsa-2022_0495)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220495 advisory. dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service CVE-2022-219862 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_5580)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20265580 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

CVE-2026-93592

A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

PYSEC-2026-3997

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...