CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...

arp-dns-attacks

ARP-DNS attacks Using PCAP library in Linux for Windows, it would be Winpcap 1. The two attacks demonstrated here can be used to poison a victim's ARP cache with which we can sniff/manipulate the packets transmitted between the victim and the local gateway. Please note that these attacks are mean...

ARTful

Description ARTful is a native Android library the allows developers to modify the Android Runtime ART on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

tools-python

Python library to parse, validate and create SPDX documents CI status Linux, macOS and Windows: Breaking changes v0.7 - v0.8 Please be aware that the upcoming 0.8 release has undergone a significant refactoring in preparation for the upcoming SPDX v3.0 release, leading to breaking changes in the...

CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - command injection CVE-2019-1010174 Detail Modified This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided. Description CImg The CImg Library v.2.3...

Windows-Explorer-CVE-2025-24071

Windows-Explorer-CVE-2025-24071 Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as...

CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)

TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...

Blackbone

Blackbone Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules...

CVE-2022-41852

Remote Code Execution in JXPath Library CVE-2022-41852 Proof of Concept CVE-2022-41852 allows attackers to execute code on the application server. You can read more about this vulnerability here: https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/ Note: I am not ...

CVE-2019-11358

CVE-2019-11358 Prototype Pollution A simple poc of prototype pollution that occurs in the jQuery's 3.4.0 extension method. The first argumentdeep in the extend method must be true...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

themis

Themis provides strong, usable cryptography for busy people General purpose cryptographic library for storage and messaging for iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, desktop Java, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM. Perfect fit for multi-platform apps...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING 该 PoC 仅用于帮助防御者、维护者及获得授权的安全团队，在其拥有或明确获准测试的系统上验证补丁、缓解措施、检测规则及暴露面。 您需自行确保对此材料的使用是合法、经授权、可控的，并在隔离的测试环境中进行。 说明 需要 GCC —— 该 PoC 构建了两个内联的 C 辅助程序：一个伪造的 NSS 库（用于写入 sudoers.d 条目）和一个触发器，用于让 cifs.upcall 进入 PoC 的私有命名空间并加载该伪造的 NSS 库。 该 PoC 假定使用常见的 x8664 NSS 模块目录 ——...

VX-API

managed by vx-underground | follow us on Twitter | download malware samples at the VXUG/samples page VX-API Version: 2.01.015 Developer: smellyvx The VX-API is a collection of malicious functionality to aid in malware development. It is recommended you clone and/or download this entire repo then...

cve-2025-32463

cve-2025-32463 chroot sudo chroot Execute the command in the selected dir name. Principle This issue was introduced in sudo v1.9.14, which upgraded the matching handling code when the chroot feature is used. This new change modifies the root directory id before matching execution of the chroot...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

pypacker

一般情報 これはPypacker：Python向けの最速かつ最もシンプルな低レベルパケット操作ライブラリです。 以下の使用例を参照して、何ができるかを確認してください。 このプロジェクトを支援したい場合は、PayPal経由で できます。 Pypackerでできること キーワードまたは生バイトからカスタムパケットを作成し、Pythonでデータを読み取り/変更: examples/createpackets.py pcapファイルからのパケット読み取り/書き込み（Wireshark/tcpdump pcap形式のみ対応）: examples/pcapreadwrite.py...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

UnhookMe

UnhookMe - Dynamically unhooking imports resolver In the era of intrusive AVs and EDRs that introduce hot-patches to the running processes for their enhanced optics requirements, modern adversaries must have a robust tool to slide through these watchguards. The propsed implementation of dynamic...