poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

resmack-fuzz-test

Test de Fuzzing Resmack Ce projet est l'exploration d'un fuzzer guidé par rétroaction qui utilise : ptrace pour l'instrumentation avec des points d'arrêt mémoire dynamiques spécifiés par le processus cible capture/restauration de processus en utilisant /proc/pid/map, /proc/pid/clearrefs et...

CVE-2026-80575

A flaw was found in the Linux kernel. The cs40l50-vibra driver, responsible for haptic feedback, improperly validates the length of custom data provided by a local user. This insufficient validation can lead to out-of-bounds reads and accesses when processing specially crafted input. A local...

sploits

Эксплойты | Code| Описание ---|---|--- CVE-2018-4310| code| MediaRemote: проблема доступа была устранена с помощью дополнительных ограничений песочницы CVE-2018-4991| code| Adobe Creative Cloud Desktop Application версии 4.4.1.298 и более ранние содержат эксплуатируемую уязвимость некорректной...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

saleemrashid-sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Crédit à Joe Vennix d'Apple Information Security pour avoir découvert le bogue...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Благодарность Джо Венниксу из Apple Information Security за обнаружение ошибки...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

CVE-2019-18634

CVE-2019-18634 Ho scritto questo exploit per Linx Mint 19.1, quindi probabilmente non funzionerà su altre distribuzioni. Se stai sfruttando un ambiente reale, ti consiglio di usare la versione dell'exploit di Salem Rashid, che ha gli offset corretti per le altre versioni di sudo. Questo è solo un...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Dank an Joe Vennix von Apple Information Security für das Finden des Fehlers...

CVE-2021-36747

CVE-2021-36747 Blackboard Learn bis 9.1 ermöglicht XSS durch einen authentifizierten Benutzer über das Formular „Feedback to Learner“. Entdeckt: 11. Mai 2018 Das Blackboard-Sicherheitsteam wurde über dieses Problem informiert. Es bestätigte die Schwachstelle am 14. Mai 2018. Beschreibung: Das...

-CVE-2019-18634-sudo-pwfeedback

-CVE-2019-18634-sudo-pwfeedback...

sgn

SGN è un codificatore binario polimorfo per scopi di sicurezza offensiva, come la generazione di payload binari staticamente non rilevabili. Utilizza un ciclo di feedback additivo per codificare le istruzioni binarie fornite, simile a LFSR. Questo progetto è la reimplementazione dell'originale...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

CVE-2026-80575

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50add copies the custom data of an FFPERIODIC/FFCUSTOM effect straight from the ffeffect the user passed to EVIOCSFF, without requiring it to hold anything:...

CVE-2026-80575

CVE-2026-80575 affects the cs40l50-vibra Linux kernel input driver (a haptic vibration controller). The function cs40l50_add() copies user-supplied custom_data from an FF_PERIODIC/FF_CUSTOM effect via the EVIOCSFF ioctl without sufficient validation. Three distinct issues exist: custom_len == 0 c...