reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...

check_38077

File Name: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

vulnerability-url

vulnerability-url WARNING! Only for tests and education! https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

CLEANSTART-2024-XF43312 If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...

CVE-2020-35112 affects multiple packages. If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as. See references for...

CLEANSTART-2024-EC89121 If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...

CVE-2020-35112 affects multiple packages. If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as. See references for...

CLEANSTART-2024-XI37617 executable file warning was not presented when downloading

CVE-2021-38510 affects multiple packages. The executable file warning was not presented when downloading. See references for individual vulnerability details...

CLEANSTART-2024-HB03047 executable file warning was not presented when downloading

Security vulnerability affects the firefox-esr package. The executable file warning was not presented when downloading...

CLEANSTART-2024-TP27104 executable file warning was not presented when downloading

CVE-2023-5727 affects multiple packages. The executable file warning was not presented when downloading. See references for individual vulnerability details...

Maltego Windows Installer security vulnerability

A security vulnerability exists in Maltego Windows Installer version 4.13.0. This vulnerability stems from issues in the executable file parsing logic and may allow local attackers to execute arbitrary code...

Astra Linux – vulnerability in binutils

An issue was discovered in the Binary File Descriptor BFD library also known as libbfd, included in GNU Binutils 2.31. An invalid memory access exists in bfdstabsectionfindnearestline within syms.c. Attackers can exploit this vulnerability to induce a denial of service application crash by using ...

CVE-2026-103521

In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attacker with administrative Thelia permissions can exploit this vulnerability to upload arbitrary executable files, such a...

CVE-2026-103521

In Thelia v2.6.0 , a vulnerability exists in the document update endpoint because it fails to perform the same validation as the document upload endpoint. While the upload endpoint blocks executable file types, the update endpoint allows an attacker with administrative permissions to upload arbit...

CVE-2026-54177

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

Malicious code in dolyame-ui-carouselline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7712f1618991466bc33076081db37dd883be10f4c0c4308fe66216cece89a03 On require of the package, index.js loads support.js and lib/telemetry.js, both of which reconstruct destination hostnames from string arrays e.g...

Malicious code in dolyame-boxy-independent-bnpl-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e1c76ea93bbc42ff9d45e1e876946d87d62dd9470683f34ffd312935b27802 On require of the package's main index.js, bridge.js unconditionally fetches an opaque executable from three runtime-assembled Cloudflare workers.dev...

Malicious code in dolyame-ui-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1110e4e32da50573666c0e5f281db639994fad22ed178e2039b9689cc350c284 The package advertises itself as a zero-dependency React calendar component library, but on require of index.js it loads shim.js, which selects a...

MAL-2026-13001 Malicious code in bnpl-blocks-mobile-bnpl-picture-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab6b4486cfd526c741063bd79f43ac71b870f9dc859dd2057c35f1121166443 On require, bootstrap.js selects a platform-specific asset path and downloads a binary from one of several Cloudflare Workers hostnames whose names a...

Malicious code in bnpl-blocks-mobile-bnpl-picture-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab6b4486cfd526c741063bd79f43ac71b870f9dc859dd2057c35f1121166443 On require, bootstrap.js selects a platform-specific asset path and downloads a binary from one of several Cloudflare Workers hostnames whose names a...