TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

CVE-2024-24590

CVE-2024-24590 Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with. Usage 1. paste the credentials given and run...

dezlock-dump

dezlock-dump Extracts everything from a running Source 2 game Deadlock, CS2, Dota 2 and generates a patch-proof C++ SDK that resolves offsets at runtime. No hardcoded values, no manual updates when the game patches. Quick Start 1. Download from Releases or build from source 2. Launch your game —...

drift-node-sdk

The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...

envsec

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow This repository contains the materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30. The contents of...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

tealtiger

TealTiger AI Agent Security & Governance SDK Deterministic governance, guardrails, cost tracking, and policy management for LLM applications. Open source. TypeScript + Python. Works with any provider. Website · Documentation · Examples · Discord · Contributing ⚡ 60-second quickstart Install: npm...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. Key features Just install SDK to web front, can be found security weakness on...

FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

cwe-sdk-javascript

cwe-sdk A Common Weakness Enumeration CWE Node.js SDK compliant with MITRE / CAPEC Install yarn add cwe-sdk Usage Require the CweManager class and use its methods const CweManager = require'cwe-sdk' Example const CweManager = require'cwe-sdk' const cweManager = new CweManager const result =...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Installation Install the metashieldcleanup package using pip:: pip install metashieldcleanup Usage Example for cleaning a file. .. code-block:: python import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...

CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Patched version of the uploader.swf and uploaderSingle.swf to fix CVE-2011-2461 More info about the vulnerable .swf files in the Magento's core can be found here - https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html The...

blitzstrike

Blitz Strike Reconnaissance at speed. Analysis in depth. Validation before report. Blitz Strike is a structured penetration-testing methodology — reconnaissance, source analysis, and validation — delivered as a universal MCP server. It enumerates the attack surface BLITZ, traces source-to-sink...

apache__uima-uimaj_CVE-2022-32287_3-3-0

Welcome to the Apache UIMA Java SDK Apache UIMAUIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a...