cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

CVE-2026-35414

CVE-2026-35414 Bloc de vulnérabilité CVE-2026-35414 auth2-pubkeyfile.c vulnérable static int matchprincipalsoptionconst char principallist, struct sshkeycert cert char result; uint i; / XXX percentexpand sequences for authorizedprincipals? / for i = 0; i nprincipals; i++ if result =...

blindy

Blindy نص برمجي بسيط لتشغيل هجوم أعمى بالقوة الغاشمة على MySQL ملاحظة: تم إنشاء هذا البرنامج النصي للمتعة، وهو مفيد في بعض تحديات CTF : الوصف سينفذ البرنامج النصي الاستعلامات المدرجة في مجموعات في الملف المقدم ويحاول القوة الغاشمة في أي مكان يوجد فيه عنصر نائب . طرق HTTP GET و POST مدعومة رؤوس HT...

CVE-2025-22870

PoC – CVE-2025-22870 – Contournement de proxy HTTP via l'ID de zone IPv6 dans Go Résumé Cette preuve de concept démontre l'exploitation de CVE-2025-22870, une vulnérabilité dans le package golang.org/x/net/http/httpproxy antérieur à la version v0.36.0, qui peut être utilisée pour contourner les...

fire-wall-server

🛡️ Atténuation par pare-feu Spring4Shell Script Python Ce projet simule un pare-feu utilisant le module http.server intégré de Python pour détecter et bloquer les requêtes malveillantes exploitant la vulnérabilité Spring4Shell CVE-2022-22965. 🔍 À propos Spring4Shell est une vulnérabilité critique...

YaraRules

YaraRules Je partage des règles YARA dans ce dépôt...

Block-Spring4Shell

Projet Spring4Shell CVE-2022-22965 Blocker Gestionnaire de Serveur Pare-feu - Ce projet est une preuve de concept POC d'un serveur pare-feu conçu pour détecter et bloquer les attaques exploitant la vulnérabilité CVE-2022-22965, communément appelée Spring4Shell. Le serveur inspecte les requêtes HT...

Driver-PiDqSerializationWrite-Example

PiDqSerializationWrite-Example Merci busybox10 d'avoir partagé avec la communauté vos connaissances sur les fonctions utilitaires et les fonctions "PiDqSerializationWrite". https://www.unknowncheats.me/forum/3742948-post13.html CPP struct memcpystructure void destination; unsigned int maxsize;...

yara-rules

yara-rules Une collection de mes règles yara...

yara-ttd

yara-ttd - Le némésis ultime des packers Utilisez les règles YARA sur des traces Time Travel Debugging 1. Démo 2. Motivations 3. Installation 4. Utilisation 5. Fonctionnalités à venir Démo Un binaire packé avec UPX Un simple binaire qui lance calc.exe, packé avec UPX. yara-ttd trouve la chaîne...

YARA-X 1.21.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

CVE-2026-12985 Mattermost DCR redirect URI allowlist bypass via improper URL component validation

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7 Mattermost failed to validate Dynamic Client Registration redirect URIs by URL component matching glob patterns against the raw URI string instead which allows a remote unauthenticated attacker to register an OAuth client with ...

CVE-2026-89160

A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF Unicode Transformation Format characters. This could lead...

Open Redirect

Spring Framework is vulnerable to an open redirect. The vulnerability is due to insufficiently restrictive URL pattern matching, which allows an attacker to manipulate a URL and redirect a victim to an attacker-controlled external destination...

CVE-2026-78691

ash_sql (an Elixir query library from the Ash ecosystem) is vulnerable to LIKE wildcard injection in its contains/2, string_starts_with/2, and string_ends_with/2 filters. The escape helpers prefix % and _ with a backslash but fail to escape a pre-existing backslash in user input, so \% becomes a ...

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

yara-x v1.20.0

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

YARA-X 1.20.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

Open Redirect

Overview org.springframework:spring-webmvc is a package that provides Model-View-Controller MVC architecture and ready components that can be used to develop flexible and loosely coupled web applications. Affected versions of this package are vulnerable to Open Redirect in the UrlHandlerFilter...

njsscan v1.0.0

njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...