StegoForge

🛡️ StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ⚡ Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...

security_articles

securityarticles- Vulnerabilities in Connected V16 Beacons Article where I explain several vulnerabilities found in the Help Flash IoT V16 beacon. These vulnerabilities affect the beacon's communications and a WiFi software update mechanism. DEC-2025...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

CVE-2016-6271

CVE-2016-6271 CVE-2016-6271 impacts libbzrtp, which is a ZRTP library developped by Belledonne Communications. This library is embedded in end-user applications, for example linphone, which is available as an Android app on Play store. Current version 3.2.7 embeds a version of libbzrtp shall not ...

PickleC2

PickleC2 PickleC2 is a post-exploitation and lateral movements framework Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShe...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

AdaptixC2

AdaptixC2 v1.2 FEB, 28: What has changed in version v1.2? Adaptix is an extensible post-exploitation and adversarial emulation framework made for authorized penetration testing. The Adaptix server is written in Golang and to allow operator flexibility. The GUI Client is written in C++ QT, allowin...

Coldroot

Coldroot Mac OS Trojan made with love 3 i make this one cuz i believe we don't give Mac it's rights in this field :P so i decided to make this Trojan to Play with Mac users 😂 Tools i'm using Free Pascal 3.0 http://www.freepascal.org/down/i386/macosx.var Intellij IDEA 15 Ultimate...

CVE-2026-50161

libre is a generic library for real-time communications with asynchron...

UBUNTU-CVE-2026-50161

libre is a generic library for real-time communications with asynchron...

CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentraladminlogin2faverify Function 🚨 CVE-2025-7955 | RingCentral Communications WordPress Exploit 📝 Vulnerability Overview CVE: CVE-2025-7955 Affected Plugin: RingCentral...

hive

来自WikiLeaks： 今天，2017年11月9日，WikiLeaks发布Hive的源代码和开发日志。Hive是CIA用于控制其恶意软件的基础设施中的一个主要组成部分。 Hive为CIA的恶意软件操作人员解决了一个关键问题。即使目标计算机上安装了最复杂的恶意软件植入程序，如果它无法以不引人注意的安全方式与操作人员进行通信，那也是毫无用处的。使用Hive后，即使植入程序在目标计算机上被发现，仅通过查看恶意软件与互联网上其他服务器之间的通信，也很难将其归因于CIA。Hive为一系列CIA恶意软件提供了一个隐蔽的通信平台，用于将窃取的信息发送到CIA服务器，并从CIA的操作人员处接收新的指令...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — 零日漏洞深度解析 🚨 🧨 这是什么 一个影响多个 Cisco Unified Communications 产品的 严重远程代码执行（RCE） 漏洞。在补丁发布之前，该漏洞已在野外被积极利用。 🔥 为什么危险 🚫 无需身份验证 🖥️ 远程代码执行 👑 可能获得 root 级访问权限 🌍 已确认的真实世界利用 这意味着攻击者可以远程完全接管受影响的系统。 🚨 CVE-2026-20045.py 使用示例 这里是一份精心整理的指南，包含 使用示例 ，用于运行 PoC 脚本，包括 如果漏洞利用在存在漏洞的 Cisco Unified...

Vulnerabilities found in Oracle Communications

Oracle has identified 31 vulnerabilities in various Oracle Communications products, including Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module – ASR, Oracle Communications Service Catalo...

Audio-Video-Communications-Top-10

This repository does not have a README...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 149.0.7827.53, using free after in WebRTC in Google Chrome on Linux allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fixed an illegal access to rmbdesc during SMC-D connection dumping. A crash was detected when dumping SMC-D connections. This issue can be reproduced by performing the following steps: 1. Run the nginx/wrk test: smcrun...