glasgo

Glasgo Static Analysis Tool This project's official repository has been moved to Github-ttarvis/glasgo. Project This is a static analysis tool written in Go for Go code. It will find security and some correctness issues that may have a security implication. Compiling To compile the tool, be sure ...

The vulnerability of the IAM Proxy component of the Identity & Access Management tool for managing access to information resources allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Aquarius L311 device driver for the Autora operating system, related to access control errors, allows a perpetrator to gain access to protected information and affect the system.

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

The vulnerability of the SBC_DecodeFrames() function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...

The vulnerability of the FOQUZ platform, related to synchronization errors when using a shared resource, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

sqlsure

sqlsure AI writes your SQL. sqlsure makes sure it's right. A query can be perfectly valid, run without error, and return a number that's silently wrong — revenue double-counted by a join, an average summed, a patient identifier exposed. Databases don't catch this. Linters don't catch this. LLMs...

yaraQA

yaraQA YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2023-42283

Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42283. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiid’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid="is vulnerable to Blind SQL injection...

EUVD-2026-97138

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument totalamount results in business logi...

sandsifter

s a n d s i f t e r : el fuzzer de procesadores x86 Resumen El sandsifter audita procesadores x86 en busca de instrucciones ocultas y errores de hardware, generando sistemáticamente código máquina para explorar el conjunto de instrucciones de un procesador y monitoreando la ejecución en busca de...

cve-2025-54236

cve-2025-54236 cve-2025-54236 poc please report any error not tested...

route-detect

route-detect Encuentre errores de seguridad de autenticación authn y autorización authz en las rutas de aplicaciones web: Rutas del servidor de streamingkoel Los errores de autenticación y autorización en rutas HTTP de aplicaciones web son algunos de los problemas de seguridad más comunes hoy en...

cdf

CDF – fuzzing diferencial criptográfico CDF es una herramienta para probar automáticamente la corrección y seguridad del software criptográfico. CDF puede detectar errores de implementación, fallos de cumplimiento, fugas de canales laterales, etc. CDF implementa una combinación de pruebas unitari...

PQCrypto-LWEKE

FrodoKEM: Learning with Errors Key Encapsulation This C library implements FrodoKEM , an IND-CCA secure key encapsulation KEM protocol based on the well-studied Learning with Errors LWE problem 1,3, which in turn has close connections to conjectured-hard problems on generic, "algebraically...

PT-2026-109608

Name of the Vulnerable Software and Affected Versions WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION WPO365 | LOGIN versions prior to 44.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...