VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2026-110755

A flaw was found in Text::CSVXS. This vulnerability allows an attacker to cause a Denial of Service DoS by providing specially crafted comma-separated value CSV input using carriage return CR-only line endings. Under default configuration settings, the parser repeatedly copies unparsed data acros...

Security update for glib2

This update for glib2 fixes the following issue: CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

pivit

Pivit Pivit is a command line tool for managing x509 certificates stored on smart cards with PIV applet support Yubikey, and using those certificates to sign and verify data. It is fully compatible with how the git command line calls external programs to sign and verify commits and tags. Install...

standalone_tdo

TDO Standalone Extractor A powerful, standalone command-line tool for extracting Cyber Threat Intelligence CTI from documents using Large Language Models with advanced structured output capabilities. 🚀 Features Multi-format Document Support : PDF, DOCX, TXT, and Markdown files Advanced LLM...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

super

SUPER Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

purpleteam

purpleteam CLI CLI component of purpleteam - Currently in alpha Installation Simplest npm install -g purpleteam If you want to debug Clone this repository. Configuration Copy the config/config.example.json to either config/config.local.json or config/config.cloud.json depending on which...

Empire

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target TARGET Target...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Command-line parameters -h View help -u Specify url -f Specify file Entries in the file must include the http/https prefix...

CLEANSTART-2026-TE73815 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes

CVE-2026-94440 affects multiple packages. Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. See references for individual vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-62322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the...

PT-2026-115883

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...

Red Hat: CVE-2026-110755: perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings

Text::CSVXS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default, getline reads with Perl's default line separator, so input with CR-only line endings arrives as one chunk. After each record the...