kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

chiasmodon

Chiasmodon Chiasmodon est un outil OSINT qui permet aux utilisateurs de rassembler des informations provenant de diverses sources et d'effectuer des recherches ciblées basées sur des domaines, des applications Google Play, des adresses e-mail, des adresses IP, des organisations, des URL, et plus...

CVE-2026-93935

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

EUVD-2026-96194

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

CVE-2026-93935

The ThemeREX Group Let's Play WordPress theme (versions

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / بحث + PoC أنشئ اختصارًا + ملف .DLL يحتوي على حمولة خبيثة = ضعه في USB وأرسله إلى الضحية = يفتح الضحية USB = تُنفَّذ الحمولة تلقائيًا! السبب الجذري 1. أولاً، علينا أن نعرف بالضبط من أين يأتي هذا الخطأ! إنه بسبب ميزة تسمى Plug-and-Play التوصيل والتشغيل حيث يكتشف نظام التشغيل الجهاز...

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Let's Play versions = 1.1.15...

AuroraStore

Aurora Store يتيح لك Aurora Store البحث عن التطبيقات وتنزيلها من متجر Google Play الرسمي. يمكنك الاطلاع على أوصاف التطبيقات ولقطات الشاشة والتحديثات والمراجعات وتنزيل ملف APK مباشرةً من Google Play إلى جهازك. لاستخدام Aurora Store، سجّل الدخول باستخدام حساب Google Play عند فتح التطبيق وتهيئته لأو...

Astra Linux – Vulnerability in liblivemedia

In liveMedia/FramedSource.cpp within Live555, up to version 1.08, an assertion failure can occur, leading to an application exit through multiple SETUP and PLAY commands...

billing-hack

Billing Hack Pour plus d'informations sur ce code, consultez http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/...

streambox-cve-2026-28618

Zero-click APV, in a player that auto-plays shared clips CVE-2026-28618 in StreamBox — the same OpenAPV decoder class as CVE-2026-0006, turned into a heap write against a session object. This repo is a public, redacted writeup: flags, instance tokens, and the HMAC key are omitted. The APK and...

nextcloud_android

تطبيق Nextcloud لنظام Android Codacy Badge عميل Android لـNextcloud. اعمل بسهولة مع بياناتك على سحابتك Nextcloud. كيفية المساهمة إذا كنت ترغب في المساهمة في Nextcloud، فأنت مرحب بك جدًا: على قنوات IRC الخاصة بنا و على شبكة freenode منتدانا على https://help.nextcloud.com لترجمات التطبيق على...

Reflections and Fragments: Securing LLMs against Sequential Mosaic Attacks

Self-play red-teaming improves language-model safety by pitting attacker and defender roles against each other in a zero-sum game. However, real adversaries increasingly use mosaic attacks: multi-turn sequences whose individual fragments are innocuous in isolation yet assemble into a harmful...

Rocky Linux 10.0 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc (crlsa-2025_15901)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202515901 advisory. podman: Podman kube play command may overwrite host files CVE-2025-9566 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc (crlsa-2026_18722)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618722 advisory. podman: Podman kube play command may overwrite host files CVE-2025-9566 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc (crlsa-2025_15900)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202515900 advisory. podman: Podman kube play command may overwrite host files CVE-2025-9566 Tenable has extracted the preceding description block directly from the CIQ security...

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

CVE-2026-101141

A cross-site scripting (XSS) vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Play Audio Page component. The flaw is located in an unknown function of the file /callrec/audio.jsp , where an attacker can remotely manipulate the viewRoleId/cfType argument to execute the attac...