CallObfuscator

CallObfuscator Obfuscate hide the PE imports from static/dynamic analysis tools. Theory This's pretty forward, let's say I've used VirtualProtect and I want to obfuscate it with Sleep, the tool will manipulate the IAT so that the thunk that points to VirtualProtect will point instead to Sleep, no...

Uchihash

Uchihash Uchihash is a small tool that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analys...

peanalyzer

peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets A collection of vulnerable code snippets taken form around the internet. Snippets taken from various blog posts, books, resources etc. No Copyright Infringement Intended Note: This is not a good benchmark for testing static analysis tools, they are broken code snippets,...

ReverseKit

ReverseKit - Dynamic Reverse Engineering Toolkit ReverseKit is a comprehensive toolkit designed to aid reverse engineers in the process of dynamic RE. With a wide range of features and functionalities, it provides an easy-to-use interface and helps you intercept, analyze, and manipulate code and...

CVE-2026-107019

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

CVE-2026-107019

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

CVE-2026-107019

The Arbeitszeiterfassung2 application (version 159) contains a security vulnerability due to insecure permissions in the feiertage.ImportActivity component. This flaw allows unauthorized attackers to create forged holiday or work-time entries by providing crafted ICS imports . While the vulnerabi...

Askanimus Worktime Account security vulnerability

The Askanimus Worktime Account has a security vulnerability stemming from an insecure permission setting in the feiertage.ImportActivity component. Unauthorized attackers can exploit this flaw to create forged holiday/workday entries via specially crafted ICS imports...

CVE-2026-107019

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

PT-2026-132174

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

CVE-2026-107019: n/a: Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows…

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

EUVD-2026-112932

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports...

Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. The module does not sufficiently validate file sources and destinations during content imports. An attacker can write arbitrary files, disclose sensitive local files accessible to the...

Hydra Ecosystem Hydra code injection vulnerability

In Hydra Ecosystem, versions prior to Hydra 1.2.2—specifically 1.1.0.dev1 and 1.4.0.dev4—contain a code injection vulnerability. This vulnerability arises because the raypkgversion OmegaConf parser passes input to importlib.importmodule, potentially allowing arbitrary module imports. Attackers ca...

CVE-2026-115383 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

CVE-2026-115383 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

CVE-2026-115383

The Wasmtime runtime versions 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 are vulnerable to an improper validation flaw. The issue arises when core modules import WebAssembly tags with a subtype of the original type. This allows malicious guests to mis-type exception object payloads , leading t...

Vulnerability related to the software supply chain issue in Bytecode Alliance wasmtime

In versions prior to Bytecode Alliance Wasmtime 48.0.4, versions 47.0.0 and versions prior to 49.0.2, versions 49.0.0 contain a software supply chain vulnerability. This vulnerability stems from improper validation of WebAssembly tag subtype imports for core modules. Malicious actors can...