azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

dcipher-cli

dcipher-cli Crack hashes using online rainbow & lookup table attack services, right from your terminal. Install ❯❯❯ npm install -g dcipher-cli Usage ❯❯❯ dcipher --help Crack hashes using online rainbow & lookup table attack services, right from your terminal. Usage ❯❯❯ dcipher ❯❯❯ echo | dcipher...

CVE-2026-114700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

mtk-su-reverse-cve-2020-0069

mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...

CVE-2026-114700 WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

CVE-2026-114700 WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

EUVD-2026-108081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

CVE-2026-114700

The Gloriafood Restaurant Menu – Food Ordering System – Table Reservation (menu-ordering-reservations) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw occurs due to the Improper Neutralization of Input During Web Page Generation (CWE-79) in versions up to and inclu...

WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.4...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

KVM-Januscape

KVM-XJ Hot Patch dumptool.py automatically finds offsets; how to use it? Just read the code. Vulnerability Overview CVE-2026-53359 Januscape is a use-after-free UAF vulnerability in the Linux kernel KVM shadow MMU. Lurking time : 16 years August 2010 to July 2026 Affected range : All Intel/AMD x8...

EUVD-2026-108051

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...

CVE-2026-86696

The esaml library (version 0.1.0 and onward), used in dropbox esaml , is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. An unauthenticated attacker can exhaust the Erlang VM atom table and crash the node by sending unsigned LogoutResponse messages to the sin...

CVE-2026-105270

The dropbox esaml library (version 0.1.0 and onward) is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability in the esaml_binding component. The esaml_binding:decode_response/2 function uses xmerl_scan:string/2 to parse SAMLResponse data, which interns every element...

CVE-2026-105270 Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion

Allocation of Resources Without Limits or Throttling vulnerability in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse. esamlbinding:decoderesponse/2 parses the decoded SAMLResponse with...

EUVD-2026-108035

Allocation of Resources Without Limits or Throttling vulnerability in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse. esamlbinding:decoderesponse/2 parses the decoded SAMLResponse with...

IATelligence

IATelligence IATelligence is a Python script that extracts the Import Address Table IAT from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage $ ./hashcobra -H --== hashcobra by sepehrdad ==-- usage:...

ExportDumper

ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage .\ExportDump dllpath e.g. .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from C:\windows\system32\version.dll. + Dumping done...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...