Bramble

🌱 Bramble a new hacking Open source suite. 📜 Summary Bramble software has been designed for the bramble project. It incorporates many features of pentesting and IT Security. It's easy to use and completely editable. It allows beginners to learn hacking and gives more experienced users a...

copy-fail-CVE-2026-31431-cpp

此存储库没有 README。...

EUVD-2026-91585

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the protocol skip routine. Specifically, multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can...

ObfuscatedSharpCollection

Obfuscated SharpCollection 一般的な C オフェンシブツール群の最新ビルドと、@0xcc00 による yetAnotherObfuscator を組み合わせ、Azure DevOps リリースパイプラインを介して CDI 方式で自動難読化を試みる、簡易的なプロジェクトです。 Obfuscated SharpCollection は、元のSharpCollection リポジトリほど完全なものになることを意図していません。Obfuscated SharpCollection には、難読化された NetFramework 4.7 ANYCPU...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2026-94652

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-85088

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D — which compares the peer certificate against the...

imaginaryC2

Imaginary C2 author: Felix Weyne website Twitter Imaginary C2 is a python tool which aims to help in the behavioral network analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...

EUVD-2026-91565

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94652

The Apache Thrift c++ bindings contain a memory leak vulnerability (CWE-401) affecting versions before 0.25.0 . Specifically, the C++ TEvhttpServer component fails to release its RequestContext memory when a processor throws an exception before a callback is executed. This vulnerability can lead ...

C-Port-Scanner

Port-Scanner A port scanner that scans a target IP for open ports and displays the results, built with C Features Scans a single port or a range of ports Multithreaded, utilizing 10 threads Supports TCP connections Displays open ports Usage Compile with a C compiler make sure to include -lws232...

CVE-2026-92834 Apache Thrift: C++ WebSocket server transport does not read a full request length

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91559

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

flawfinder

概要 これはDavid A. Wheelerによる「flawfinder」です。 Flawfinderは、C/C++ソースコードをスキャンして潜在的なセキュリティ上の欠陥を報告するシンプルなプログラムです。ソフトウェアの脆弱性を調査するための有用なツールであり、静的ソースコード解析ツールへの簡単な入門としても役立ちます。インストールと使用が簡単になるように設計されています。FlawfinderはCommon Weakness Enumeration（CWE）をサポートしており、公式にCWE互換です。SARIF、SonarQube、HTMLなど、さまざまな出力形式をサポートしています。...

EUVD-2026-91418

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D — which compares the peer certificate against the...