SubSeven

SubSeven Legacy "SubSeven Legacy es un remake completo del infame SubSeven Backdoor también conocido como Sub7, un troyano de acceso remoto popular de finales de los 90. Se puede encontrar más información sobre el Sub7 Backdoor original en la página oficial de Wikipedia. Al igual que el programa...

pythia

Introducción / tl;dr Esta herramienta escanea un archivo ejecutable en busca de datos de Delphi, incluyendo RTTI y tablas de funciones virtuales. Genera un archivo JSON con información sobre las clases y funciones identificadas, que puede utilizarse para análisis adicionales, por ejemplo: Generar...

Remote-Access-Trojan-Database

Remote-Access-Trojan-Database Todas las muestras en esta base de datos solo pueden utilizarse con fines de investigación. el estado de todas las familias de RAT, incluido el lenguaje de programación utilizado para escribir los stubs de RAT, el año de debut de las familias de RAT y la fuente para...

sandcat

Sandcat 浏览器 Sandcat 是一款轻量级多标签网页浏览器，结合了 Chromium 和 Lua 的速度与功能。它内置实时请求头、可扩展的用户界面与命令行控制台、资源查看器，以及许多对 Web 开发人员和渗透测试人员有用的功能，尤其适用于检查实时 Web 应用。如需更多详情，请访问 http://www.syhunt.com/sandcat/。另请参阅下面的 docs 目录和致谢部分，了解有关 Sandcat 架构的更多信息。 目录 /docs - Lua API 文档 /packs - 未压缩包文件的内容 /Common - 通用...

PsyloDbg

PsyloDbg PsyloDbg es un depurador de Windows de código abierto, de rápido crecimiento y fácil de usar, programado íntegramente en Delphi. El objetivo principal de este proyecto es ofrecer a los analistas de malware otra herramienta para reducir su tiempo de respuesta durante su proceso de análisi...

Sub7

Sub7 SubSeven era un programa backdoor o R.A.T. herramienta de administración remota escrito en Delphi por mobman, que permitía a otros obtener acceso total a sistemas Windows 9X a través de una conexión de red. Este es el código fuente de Sub7 2.1.2 , lanzado en abril de 2000 justo antes de que ...

SUSE CVE-2026-55969

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound

A flaw was found in Apache Thrift's C++, cglib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted input. The flaw can lead to the affected service becoming unavailable...

CVE-2026-55969

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

AZL-93992 CVE-2026-55969 affecting package thrift for versions less than 0.24.0-1

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-55969

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-55969

Apache Thrift contains an Integer Overflow in TProtocol::checkReadBytesAvailable() affecting multiple bindings (C++, c_glib, Go, netstd, Delphi, Haxe) and all releases prior to 0.24.0. The issue is triggered via improper read byte count checks, potentially impacting availability. A fix is provide...

EUVD-2026-49153

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

PT-2026-64885

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An integer overflow or wraparound issue exists in the C++, c glib, Go, netstd, Delphi, and Haxe bindings. The flaw is located in the checkReadBytesAvailable function of the TProtocol class...

Prioritization of Risks from Artificial Intelligence: A Delphi Study of 272 International Experts

Artificial intelligence poses many risks, ranging from familiar present-day harms to unprecedented and potentially catastrophic ones. Effective risk management requires prioritization: we must understand which risks are most severe, who is most vulnerable, and who is most responsible for addressi...

CVE-2026-28497

TinyWeb is a web server HTTP, HTTPS written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine Val allows an unauthenticated remote attacker to bypass Content-Length restrictions and perform HTTP Request Smuggling. This can le...

EUVD-2026-9972

TinyWeb is a web server HTTP, HTTPS written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header values and later maps them into CGI environment variables HTTP. The parser did not strictly reject dangerous control characters in header lines and header values, including CR, L...

CVE-2026-29046

TinyWeb (Delphi, Win32) before v2.04 maps request header values into CGI environment variables (HTTP_*) and does not strictly reject dangerous control characters (CR, LF, NUL) or their encoded forms (%0d, %0a, %00). This can cause header value confusion across parser boundaries and place unsafe d...