21265 matches found
AlphaGolang
AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...
VulnScan-Pro
⚡ VulnScan Pro A professional cybersecurity vulnerability scanner built with Python 3.13 and PyQt6. Designed for authorised security assessments, educational research, and defensive cybersecurity. ⚠ Legal Notice This tool must only be used on systems you own or have explicit written permission to...
CVE-2026-10818
CVE-2026-10818 WPForms Pro = 1.10.1.1 - 通过分块上传初始化/完成顺序缺陷实现的未认证任意文件写入 CVE-2026-10818 WPForms Pro ≤ 1.10.1.1 — 通过分块上传实现的未认证任意文件写入 概念验证（PoC）漏洞利用 分块上传初始化/完成顺序缺陷 → 可预测路径暴露 → 远程代码执行 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-10818 受影响插件| WPForms Pro WordPress 受影响版本| 1.10.1.1 及之前的所有版本 类型| 未认证的任意文件写入 CWE|...
CVE-2026-4883
CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...
heap-viewer
HeapViewer 一个用于检查堆的 IDA Pro 插件，专注于漏洞利用开发。 目前支持 glibc malloc 实现 ptmalloc2。 2018年Hex-Rays插件大赛第三名 需求 IDA Pro = 7.0 测试环境 glibc 2.23 = 2.26 链表的 GraphView bins/tcache 结构体视图 mallocstate / mallocpar / tcacheperthread 实用工具： Unlink 合并信息 可释放/合并信息 假 fastbin 查找器 House of force 辅助 有用的 libc 偏移量 计算块大小 request2si...
gemini-2.5-pro-nf-tables-red-teaming
Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 LLM Safety Research | Responsible Disclosure | AI Alignment Evaluation Researcher : Niranj R Mahaswar Destawell Google AI Vulnerability Reward Program : 889286 — Out of Scope Summary This repository documents a comparative LLM red...
ParrotNG
ParrotNG ParrotNG is a tool capable of identifying Adobe Flex applications SWF vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk. Download the latest release from HERE. Features Written in Java, based on swfdump One JAR, two flavors: command line...
CVE-2024-3922-Poc
CVE-2024-3922-Poc Dokan Pro Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://192.168.110.184:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/126.0.0.0 Safari/537.36 Accept:...
CVE-2026-8732-EXPLOIT
CVE-2026-8732 – WordPress WP Maps Pro 漏洞利用 未经身份验证的管理员接管 | CVSS 9.8 | 可直接使用 🔥 您将获得 适用于 CVE-2026-8732 的完整可用 Python 漏洞利用 无需身份验证即可创建管理员账户 返回神奇登录 URL – 立即接管站点 适用于 WP Maps Pro ≤ 6.1.0 隐秘、干净，默认不留日志 ⚡ 为什么选择我们 已在 50+ 个易受攻击的目标上测试 无冗余代码 – 纯粹的漏洞利用 适用于红队、渗透测试、漏洞赏金 此 CVE 的终身更新 全天候支持 🎯 适用人群 渗透测试人员 安全审计人员 红队行动...
cve-2026-43499
IonStack Kernel exploit for Redmi Pad Pro dizi / POCO Pad 5G. Cloudflare Pages Deployment Git Integration 1. Go to Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. Select this repository 3. Build settings: Framework preset: None Build command: leave empty Build output directory...
patching
Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...
patching
Patching - IDA Pro的交互式二进制补丁工具 概述 在恶意软件分析、软件逆向工程以及更广泛的安全研究领域中，通过修改汇编代码来改变现有程序的行为并不罕见。本项目扩展了流行的 IDA Pro 反汇编器，打造了一个更强大的交互式二进制补丁工作流，旨在支持快速迭代。 本项目目前基于普遍使用的 Keystone Engine 的一个小型 fork，支持 x86/x64 和 Arm/Arm64 架构的补丁，并计划在未来的版本中启用剩余的 Keystone 架构。 特别感谢 Hex-Rays 对本插件开发的支持。 版本发布 v0.2 —— 重要错误修复，IDA 9 兼容性 v0.1 —...
CVE-2026-8732
CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...
dsync
dsync IDAPython 插件，用于同步反编译与反汇编代码视图。 更多详情请参阅源代码中的注释。 需要 IDA Pro 7.3 注意：你可能希望改用 IDA 7.3 引入的官方同步功能。...
CMF-Watch-Pro-2-BLE-Protocol
CMF Watch Pro 2 — BLE Protocol reverse-engineered Unofficial. This document describes the Bluetooth Low Energy BLE protocol of the CMF Watch Pro 2 CMF by Nothing, reconstructed by reverse engineering for an alternative companion app. It is not affiliated with or endorsed by Nothing/CMF. Use at yo...
Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.5.0 Security feature bypass (APSB26-157) (macOS)
The version of Adobe Premiere Pro installed on the remote macOS host is prior to 25.6.6, 26.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB26-157 advisory. - Server-Side Request Forgery SSRF CWE-918 potentially leading to Security feature bypass CVE-2026-84395 Note th...
APSB26-157 : Security update available for Adobe Premiere Pro
Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses critical vulnerability that could result in security feature bypass...
oppo-A5-PRO-5G-CVE-2026-43499
CVE-2026-43499 GhostLock — CVE-2026-43499 Vulnerability Adaptation Research Archive Device: OPPO PKP110 OP5DF3 · Kernel 6.1.134-android14-11-o · Android 16 SDK 36 Research period: 2026-08-20 2026-08-22 Final Conclusion CVE-2026-43499 exploitation chain cannot converge on 6.1 GKI + Android 14/15/1...
CVE-2023-36169
CVE-2023-36169 An issue in SlySoft Game Jackal Pro v.5.2.0.0 allows an attacker to execute arbitrary code via the server.exe component Exploit Title: Game Jackal Server v5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.allradiosoft.ru Software...
