sqlsure

sqlsure L'IA écrit votre SQL. sqlsure garantit qu'il est correct. Une requête peut être parfaitement valide, s'exécuter sans erreur et renvoyer un nombre qui est silencieusement faux — un revenu compté deux fois par une jointure, une moyenne additionnée, un identifiant de patient exposé. Les base...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

route-detect

route-detect Trouvez les bugs de sécurité d'authentification authn et d'autorisation authz dans les routes d'applications web : Routes du serveur de streamingkoel Les bugs d'authentification authn et d'autorisation authz dans les routes HTTP d'applications web sont parmi les problèmes de sécurité...

PQCrypto-LWEKE

FrodoKEM: Инкапсуляция ключей на основе задачи обучения с ошибками Эта библиотека на языке C реализует FrodoKEM — протокол инкапсуляции ключей KEM, безопасный в модели IND-CCA, основанный на хорошо изученной задаче обучения с ошибками LWE 1,3, которая, в свою очередь, тесно связана с гипотетическ...

yaraQA

yaraQA YARA 규칙 분석기 - 규칙 품질 및 성능 향상 왜? YARA 규칙은 구문적으로 올바를 수 있지만 여전히 제대로 작동하지 않을 수 있습니다. yaraQA는 이러한 문제를 찾아 YARA 규칙 세트의 작성자나 관리자에게 보고하려고 합니다. yaraQA가 감지하려는 문제는 예를 들어 다음과 같습니다: 규칙이 구문적으로는 올바르지만 조건의 오류로 인해 절대 일치하지 않는 경우 예: 문자열이 하나인 규칙에 조건에 2 of them이 있는 경우 문자열과 수정자modifier 조합이 잘못되었을 가능성이 있는 규칙 예: $ =...

CVE-2023-42283

免责声明 仅供教育目的使用！ 详情 CVE-2023-42283 的概念验证。 Tyk Gateway 存在 SQL 注入漏洞。 已在 5.0.7 版本中修复。 “https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid=” 的 URL 参数 ‘apiid’ 存在盲 SQL 注入漏洞。 利用 使用 sqlmap 及以下参数： root@kitploit: python.exe .\sqlmap.py -u...

sandsifter

s a n d s i f t e r : le fuzzer de processeur x86 Aperçu Le sandsifter audite les processeurs x86 pour détecter des instructions cachées et des bugs matériels, en générant systématiquement du code machine pour parcourir le jeu d'instructions d'un processeur et en surveillant l'exécution pour...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

cdf

CDF – fuzzing différentiel cryptographique CDF est un outil pour tester automatiquement la correction et la sécurité des logiciels cryptographiques. CDF peut détecter des erreurs d'implémentation, des non-conformités, des fuites par canaux auxiliaires, etc. CDF implémente une combinaison de tests...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

EUVD-2026-54577

Kirby: System path exposure from error messages in the REST API...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

Snow Crash

Snow Crash Этот проект представляет собой введение в компьютерную безопасность. Snow Crash поможет вам познакомиться с безопасностью в различных поддоменах с ориентацией на разработчика. Вы познакомитесь с несколькими языками ASM, Perl, Php и т.д., разовьете определенную логику для понимания...

Linux Distros Unpatched Vulnerability : CVE-2026-59281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument...

cve-2025-54236

cve-2025-54236 cve-2025-54236 poc segnala eventuali errori non testato...

glasgo

Glasgo Ferramenta de Análise Estática O repositório oficial deste projeto foi movido para Github-ttarvis/glasgo. Projeto Esta é uma ferramenta de análise estática escrita em Go para código Go. Ela encontrará problemas de segurança e alguns problemas de correção que podem ter implicações de...

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

UBUNTU-CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...