CVE-2026-103102

Pexip Infinity versions prior to 41.0 are vulnerable to a denial of service (DoS) condition due to improper input validation within the signaling implementation . A remote attacker can trigger a software abort by accessing a gateway call from a WebRTC/API client . No specific remediation or explo...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

MakerChecker

🛡️ MakerChecker The open-source security layer for AI agents. Deny-by-default enforcement, human approvals, and a cryptographically signed audit trail — so your agent runs only what it's granted and provably can't approve its own work. Website · Live Demo · mc scan · Docs Your agents keep running...

SilentMoonwalk

SilentMoonwalk PoC Implementation of a fully dynamic call stack spoofer TL;DR SilentMoonwalk is a PoC implementation of a fully dynamic call stack spoofer, implementing a technique to remove the original caller from the call stack, using ROP to desynchronize unwinding from control flow. Authors...

sage

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

Vba2Graph

Vba2Graph A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keywor...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: notroot@osboxes:/Desktop/gif$ make...

BrokenFlow

BrokenFlow A simple PoC to invoke an encrypted shellcode by using an hidden call. Introduction This code uses a simple trick to hide the instruction that effectively will jump to our shellcode. This should make the static analysis or emulation more challenging. As always, if this concept was...

PIL-CVE-2017-8291

Python PIL Remote Command Execution Vulnerability GhostButt The PIL Pillow module for processing images in Python is affected by the GhostButt vulnerability CVE-2017-8291 because it calls GhostScript internally, resulting in a remote command execution vulnerability. Vulnerability Summary PIL...

FstHook

FstHook 一个通过挂钩KiFastSystemCall来拦截原生函数的库 注意：KiFastSystemCall挂钩仅适用于以下系统： Windows XP Service Pack 3 32位 Windows Vista 32位 Windows 7 32位...

diaphora

δiaphora 安装 使用 Hex-Rays 插件管理器 安装： hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip 手动安装说明见下文。 Diaphora（διαφορά，希腊语中意为“差异”）3.4 版本是截至目前（2026 年）可用的最先进的程序差异比较工具（作为 IDA 插件工作）。它于 2015 年在 SyScan 期间首次发布，此后一直得到积极维护：Diaphora 已经被移植了 11 年，覆盖了从 6.8 到 9.4 的每一个 IDA 次要版本。...

NimicStack

NimicStack NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs. Whole project is based on the PoC shared by WithSecure Labs Compilation You can directly compile the source code with the following command: nim c -d=mingw --app=console --cpu=amd64...

CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF Un programa eBPF para detectar y defender ataques en CVE-2022-0847. En el espacio del kernel, el programa detecta las llamadas al sistema splice ; si dicha llamada contiene un pipe como fd de salida y los flags del buffer del pipe están establecidos en PIPEBUFFLAGCANMERGE ,...

CVE-2026-100705

A flaw was found in Kyverno. Due to missing egress network filtering in its legacy API call handler, an attacker with permission to author policies or submit templated resources can trigger Server-Side Request Forgery SSRF. This vulnerability allows the attacker to force Kyverno to issue arbitrar...

vulnhuntr

A tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis. World's first autonomous AI-discovered 0day vulnerabilities Description Vulnhuntr leverages the power of LLMs to automatically create and analyze entire code call chains starting from remote user input an...

zelos

Zelos Zelos（Z eropoint E mulated L ightweight O perating S ystem 的缩写，即零起点模拟轻量级操作系统）是一个基于 Python 的二进制模拟平台。其用途之一是通过命令行或 Python 脚本快速评估二进制文件的动态行为。所有系统调用都被模拟，以隔离目标二进制文件。支持 Linux x8664（32 位和 64 位）、ARM 和 MIPS 二进制文件。Unicorn 提供 CPU 模拟。 完整文档可在此获取。 安装 使用包管理器 pip 安装 zelos。 pip install zelos 基本用法 命令行...

LibTP_Gadget

LibTPGadget Esta es una generalización de https://github.com/AlmondOffSec/LibTPLoadLib para hacer proxy de APIs con un número arbitrario 11 como máximo, pero suficiente de argumentos. Se proporciona como una librería compartida de Crystal Palace. API compatible con el LibTP de @rasta-mouse para...

call_map

Call Map .. default-role:: code Acerca de Call Map es una herramienta para navegar por grafos de llamadas en Python, con planes de soportar otros lenguajes. A continuación se muestra una captura de pantalla después de ejecutar callmap -m toolz, y luego hacer clic en algunas funciones. .. figure::...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...