oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

CVE-2026-116783

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, udptlrxpacket used a peer-controlled FEC entry count directly to fill five-entry FEC arrays in a...

CVE-2026-116783

FreeSWITCH versions prior to 1.11.2 are vulnerable to an out-of-bounds write within the mod_spandsp module. The root cause is located in the udptl_rx_packet() function, which uses a peer-controlled FEC entry count to populate five-entry FEC arrays without sufficient validation. A larger count all...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

h0neytr4p

Adjusted for T-Pot This fork of h0neytr4p was revised for T-Pot with the following features: Add Docker support Dockerfile, docker-compose.yml Use a single logfile instead of two Log to JSON instead of CSV Enrich JSON log file with additional info i.e. Cookies, Headers, Destination Port, etc...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

CVE-2026-99017

A flaw was found in the Linux kernel. Under specific configurations on RISC-V systems using T-Head processors, the kernel does not execute early boot checks required to identify hardware errata. As a result, the default mitigation for the Ghostwrite hardware vulnerability is not applied, which ma...

exploit-t-platform

Exploit-t Platform Practical-risk vulnerability prioritisatio...

CVE-2026-57198

A flaw was found in Asterisk. In deployments where the chansip channel driver has text support enabled, an authenticated attacker can send specially crafted network packets to trigger a heap-based buffer overflow in the T.140 Redundant Data RED handling mechanism. This vulnerability could allow t...

Zhilly

AI Pentester Assistant 🛡️ Zhilly AI Pentester Assistant AI-Powered, Portable Cyber Security & Cyber Interaction Tool Yapay Zeka Destekli, Taşınabilir Siber Güvenlik ve Siber Etkileşim Aracı 🇬🇧 English • 🇹🇷 Türkçe • ⚡ Web Flasher 🇬🇧 English / English Version 📖 About the Project This project is an...

T-MAP

T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search T-MAP is a trajectory-aware evolutionary search framework for red-teaming LLM agents over MCP servers. It iteratively generates and mutates adversarial prompts guided by execution trajectories, mapping the agent's vulnerabili...

T-Backdoor

Sample Codes for the paper: 'T-Backdoor: Exploiting Temporal Redundancy in Neuromorphic Data for Spike-preserving Backdoor Attacks on SNNs' Abstract Backdoor attacks are a serious security threat to deep neural networks DNNs and remain largely underexplored for spiking neural networks SNNs...

CVE-2026-57198

The Asterisk telephony toolkit is vulnerable to a T.140 RED heap buffer overflow when the chan_sip channel driver is installed and the textsupport option is enabled. An authenticated attacker can exploit this using carefully crafted packets, potentially leading to remote code execution or a syste...

CVE-2026-57198 Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...

CVE-2026-57198 Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...

CVE-2026-57198 Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...

Linux Distros Unpatched Vulnerability : CVE-2026-99017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the...

CVE-2026-57198: Heap-based Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...