iberyanbytes

Iberyanbytes Strumento di enumerazione AD, che consente di acquisire informazioni relative alla rete e di raccogliere dettagli su interfacce di rete, configurazione IP, DNS e tabelle di routing. Enumera le condivisioni di rete e analizza i permessi delle condivisioni, raccoglie dettagli sul...

BlueSAM

BlueSAM BOF Eine Cobalt Strike Beacon Object File-Adaption von BlueHammer, die versucht, eine Kopie der SAM-Datenbank über Windows Defender Update/VSS-Verhalten zu erhalten und Offline-Registrierungsdaten von Beacon zu verarbeiten. Credits an Nightmare-Eclipse's BlueHammer...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

serverless-application-model

Trasformazione AWS SAM La trasformazione AWS Serverless Application Model AWS SAM è una macro AWS CloudFormation che trasforma i modelli SAM in modelli CloudFormation...

maalik

Maalik Framework di Pivoting di Rete e Post-Exploitation. Funzionalità Funzionalità della Console Notifica desktop su nuova sessione. Termina facilmente una sessione online. Costruisci facilmente il client Maalik, Fhdawn. Valori configurabili in settings.ini Shell di root. Multithread, ottieni pi...

backup_dc_registry

Backup Operator Registry Backup zur Domänenkompromittierung Ein einfacher POC, der Backup-Operator-Berechtigungen missbraucht, um SAM-, SYSTEM- und SECURITY-Hives remote zu dumpen. Forschungs-Credits gehen an: @filipdragovic Portiert aus @mpgn Windows-PoC Verwendung Dieser Proof of Concept ist ei...

ShadowSteal

ShadowSteal | CVE-2021-36934 Implementazione pura in Nim per sfruttare CVE-2021-36934, la escalation dei privilegi locali LPE SeriousSAM. Non OPSEC safe.... ancora ;. Non rivendico il merito della scoperta di questo exploit. Avvio rapido Build con Docker Iniziare con ShadowSteal ora è più facile...

PYSEC-2026-1206 AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server-side authentication against a SAM file might succeed with invalid credentials if the server had configured an invalid SAM file path. Clients based on FreeRDP are not affected by this issue. However...

CLSA-2026-1778146905 freerdp: Fix of CVE-2022-24883

Reuse centos7els branch for oraclelinux7els - CVE-2022-24883: fix server-side NTLM auth bypass against a SAM database by rejecting auth when SamOpen fails or the user entry is missing...

Unity Linux 20.1070e Security Update: freerdp (UTSA-2026-006940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006940 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for...

MAL-2026-2403 Malicious code in polymarkets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 facfcba74011619f5bb2eaf096e41239f81520cb4effff3b45f8b42c84d42060 During import, the code attempts to exfiltrate to a hardcoded location sensitive data, including private SSH keys, cloud credentials and Windows SAM database...

Malicious code in polymarkets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 facfcba74011619f5bb2eaf096e41239f81520cb4effff3b45f8b42c84d42060 During import, the code attempts to exfiltrate to a hardcoded location sensitive data, including private SSH keys, cloud credentials and Windows SAM database...

[SECURITY] Fedora 43 Update: samtools-1.23.1-1.fc43

SAM Sequence Alignment/Map is a flexible generic format for storing nucleotide sequence alignment. SAM Tools provide various utilities for manipulating alignments in the SAM format, including sorting, merging, indexing and generating alignments in a per-position format...

CVE-2026-31967 HTSlib CRAM reader has out-of-bounds read due to improper validation of input

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cramdecodeslice function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value, fo...

SecureAgeExploit

SecureAge Responsible Disclosure PoCs This repository contain...

Jervis 加密问题漏洞

Jervis is an automation tool from the personal developer Sam Gleske. Versions of Jervis prior to 2.2 suffer from a cryptographic issue vulnerability that stems from the lack of authentication in AES/CBC/PKCS5Padding, which makes it susceptible to padded predicate attacks and ciphertext manipulati...

Jervis 安全漏洞

Jervis is an automation tool from the individual developer Sam Gleske. A security vulnerability exists in versions prior to Jervis 2.2 that stems from the deterministic derivation of AES IV from passwords, which could lead to cryptographic vulnerabilities...

CVE-2025-14451

The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.0.0. This is due to insufficient validation on the redirect URL supplied via the 'sam-redirect-to' parameter. This makes it possible for unauthenticated attackers to redirect users...

CVE-2025-14451

The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.0.0. This is due to insufficient validation on the redirect URL supplied via the 'sam-redirect-to' parameter. This makes it possible for unauthenticated attackers to redirect users...