fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

Keystone 6 Login Page - Open Redirect and Cross-Site Scripting

On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS. id: CVE-2022-0087 info: name: Keystone 6 Login Page - Open Redirect and Cross-Site Scripting author: ShivanshKhari severity: medium description: | On the login page,...

shellen

Shellen General Shellen is an interactive shellcoding environment. If you want a handy tool to write shellcodes, then shellen may be your friend. Shellen can also be used as an assembly or disassembly tool. keystone and capstone engines are used for all of shellen's operations. Shellen only works...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

ShellcodeCompiler

Shellcode Compiler Shellcode Compiler is a program that compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows x86 and x64 and Linux x86 and x64. It is possible to call any Windows API function or Linux syscall in a user-friendly way. Shellcode Compiler...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

keystone: OpenStack Keystone: Privilege escalation via chained application credential impersonation and trust misuse

A flaw was found in OpenStack Keystone. An attacker with a member role on a project can escalate their privileges to an administrator role. This is achieved by combining an application credential impersonation vulnerability with the misuse of Keystone trusts. The system incorrectly validates...

openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation

A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 security advisory

Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 7 : Red Hat OpenStack Platform 13.0 security advisory (Important) (RHSA-2026:94039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94039 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

sickle-pdk

Sickle - Payload Development Kit Sickle is a tool I originally developed to help me be more effective, in both developing and understanding shellcode. However, throughout the course of its development and usage It has evolved into a payload development kit. Although current modules are mostly aim...

QuickAsm

Quick Assembler Simple experimental x86/x64 assembler and emulator. Quick Assembler is a Windows application built with WTL and my WTLHelper library, with light and dark themes. Here is a list of currently supported features: Editing, opening, and saving ASM files, including undo/redo, with synta...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

GHSA-2QM8-X737-GMW5 vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...

GHSA-9M75-VC3G-4X39 vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...

scare

scare - Simple Configurable Assembly REPL && Emulator scare is a multi-arch assembly REPL and emulator for your command line. There aren't many modern assembly REPLs out there. The ones that do exist are either opaque webapps, or are tied to specific architecture/platform. scare was built for...

GHSA-FM9C-5RCF-2Q5P vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...

GHSA-MM57-4V3P-RCHX vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...

CVE-2026-119194 vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...

CVE-2026-119195 vulnerabilities

Vulnerabilities for packages: elastic-connectors, localstack, nemo-skills, openstack-ironic-2026.1, superset-fips, airflow, openstack-keystone-2026.1-fips, sentry-fips, snuba-fips, openstack-cinder-2026.2, vllm-openai-cuda-13.0, mlflow, nemo-rl-cuda-13.0, openstack-keystone-2026.2-fips,...