pantagrule

Pantagrule gargantuan hashcat rulesets generated from compromised passwords Project maintenance warning : This project is deemed completed. No pull requests or changes will be made to this project in the future unless they are actual bugs or migrations to allow these rules to work with newer...

WHP

M$ Windows Hacking Pack Tools here are from different sources. The repo is generally licensed with WTFPL, but some content may be not eg. sysinternals. "pes" means "PE Scambled". It's useful sometimes. Remote Exploits Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play Service Overflow, Works...

vmware_exploit_pack_CVE-2009-1244

vmwareexploitpackCVE-2009-1244 vmware cloudburst exploit CVE-2009-1244 hackto in the .exe - video here: https://vimeo.com/6595412...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

IntRec-Pack

IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection

Cryptocurrency Widgets Pack Plugin =1.8.1 for WordPress contains an unauthenticated SQL injection caused by unsanitized user input in database queries, letting attackers execute arbitrary SQL commands, exploit requires no authentication. id: CVE-2022-44588 info: name: Cryptocurrency Widgets Pack ...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Class Input Validation Error Credits Tobias Kraze from makandra an...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Notes on Using the Companion Resource Pack for "0day Security: Software Vulnerability Analysis Technology Second Edition" The materials in this resource pack are for learning purposes only. No organization, individual, or institution may us...

CVE-2021-44228-Log4j

Test this content before applying it to production systems. Usage Download the latest package from releases here: https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases and then Import the Fixlets, Analyses, and Computer Group into a site and apply computer subscriptions...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...

BOF-pack-1

BOF-pack-1 A care package of useful bofs for red team engagments GetAppLockerPolicy Prints the Effective AppLockerPolicy for the domain TokenElevate Creates a process with winlogon's tokenIncludes Tcb Privilege enabled by default and other winlogon specific privileges. Alternative way to elevate ...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

gix-pack: gix-pack: Denial of Service via crafted pack-header object count

A flaw was found in the gix-pack component of Gitoxide. A malicious remote repository can cause a Denial of Service DoS by providing a crafted pack header with an excessively large object count during clone or fetch operations. This forces the client to attempt an uncontrolled memory allocation,...

gix-pack: gix-pack: Denial of Service via crafted pack header

A flaw was found in gix-pack. A malicious remote server can trigger a Denial of Service DoS by returning a crafted pack header declaring version 3 during a repository clone or fetch operation. Because the header decoder triggers an internal assertion failure when encountering this version, the...

gix-pack: gix-pack: Denial of Service via malformed packfile delta entries

A flaw was found in gix-pack. A malicious remote repository can cause a Denial of Service DoS by serving a crafted Git packfile containing malformed delta offset entries during a fetch operation. Processing these entries leads to an unhandled application crash, abruptly terminating the fetch...

gix-pack: gix-pack: Denial of Service via crafted pack header

A flaw was found in gix-pack. A malicious remote server can trigger a Denial of Service DoS by returning a crafted pack header declaring version 3 during a repository clone or fetch operation. Because the header decoder triggers an internal assertion failure when encountering this version, the...

gix-pack: gix-pack: Denial of Service via malformed packfile delta entries

A flaw was found in gix-pack. A malicious remote repository can cause a Denial of Service DoS by serving a crafted Git packfile containing malformed delta offset entries during a fetch operation. Processing these entries leads to an unhandled application crash, abruptly terminating the fetch...

gix-pack: gix-pack: Denial of Service via crafted pack-header object count

A flaw was found in the gix-pack component of Gitoxide. A malicious remote repository can cause a Denial of Service DoS by providing a crafted pack header with an excessively large object count during clone or fetch operations. This forces the client to attempt an uncontrolled memory allocation,...