satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

patch-CVE-2026-31337

Patch: CVE-2026-31337 Details zur Schwachstelle CVE : CVE-2026-31337 Produkt : Ivanti Connect Secure Beschreibung : RCE durch Umgehung der Authentifizierung Schweregrad : Kritisch CISA KEV : Ja Ausnutzung in freier Wildbahn bestätigt Patch-Status: BEREITGESTELLT Feld| Wert ---|--- Patch-Datum|...

ivantiunlocker

ivantiunlocker Previeni CVE-2025-22457 e altri problemi di sicurezza con Juniper/Ivanti Secure Connect SSL VPN Molti problemi di sicurezza hanno riguardato i dispositivi SSL VPN di recente. Non puoi più sentirti al sicuro. E poi c'è CVE-2025-22457 ! Leggi la storia dietro :...

pwn-pulse

pwn-pulse.sh Exploit per la vulnerabilità di lettura arbitraria di file in Pulse Connect Secure SSL VPN CVE-2019-11510 Script creato da braindead @BishopFox. Basato sulla ricerca di Orange Tsai e Meh Chang. Ringraziamenti anche a Alyssa Herrera e 0xDezzy per ulteriori contributi. Un enorme grazie...

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

CVE-2019-11539

CVE-2019-11539 Scoperta originale: Orange Tsai, Meh Chang Autori: Justin Wagner, Alyssa Herrera Ringraziamenti a: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Descrizione della vulnerabilità Nelle versioni di Pulse Secure Pulse Connect Secure 9.0RX precedenti alla 9.0R3.4, 8.3RX precedenti alla...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Signal: Fix for restoring SVE context When SME is supported, restoring the SVE signal context can fail in several ways. This can result in the task being placed in an invalid state, where the kernel might read from...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

secure-boot-cert-servicing

Rotazione dei certificati Secure Boot — valutazione e manutenzione Un singolo script PowerShell autonomo che valuta la posizione dei certificati Secure Boot di una macchina Windows per la rotazione 2011 → 2023 CVE-2023-24932 / KB5025885 e, solo quando glielo chiedi esplicitamente, attiva l'opt-in...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

NachoVPN

NachoVPN 🌮🔒 NachoVPN est une preuve de concept qui démontre l'exploitation de clients SSL-VPN, à l'aide d'un serveur VPN malveillant. Il utilise une architecture basée sur des plugins afin que la prise en charge de produits SSL-VPN supplémentaires puisse être apportée par la communauté. Il prend...

themis

Themis fornisce una crittografia solida e utilizzabile per persone impegnate Libreria crittografica di uso generale per archiviazione e messaggistica per iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, Java desktop, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM. La soluzion...

BitLock-Crypto-Research

🛡️ BitLock Framework: Ecosistema di Crittovirologia e C2 PoC Questo repository contiene una Proof of Concept PoC completa progettata per lo studio delle architetture di minacce moderne. Il progetto simula un ambiente di attacco fileless senza file con un'infrastruttura di comando e controllo C2...

python-urwid security update

2.5.3-5 - Use secure random session identifiers...

tink

Tink NOTA : Tink è stato spostato su github.com/tink-crypto e questo repository non è più attivo! Come pianificato, abbiamo suddiviso Tink in più repository GitHub ospitati su github.com/tink-crypto. Di conseguenza, abbiamo reso questo repository di sola lettura e non sarà mantenuto in futuro. Un...

virt-firmware

Ferramentas para volumes de firmware ovmf / armvirt Esta é uma pequena coleção de ferramentas para imagens de firmware edk2. Elas suportam a decodificação e impressão do conteúdo de volumes de firmware. Stores de variáveis OVMFVARS.fd podem ser modificados, por exemplo, para registrar certificado...

training-application-security

फ्री सिक्योर कोडिंग और एप्लिकेशन सुरक्षा प्रशिक्षण — ओपन सोर्स SCORM अभ्यास 40 फ्री, ओपन-सोर्स सिक्योर कोडिंग अभ्यास जो वेब एप्लिकेशन सुरक्षा को उस तरह सिखाते हैं जिस तरह डेवलपर्स सीखते हैं — SQL इंजेक्शन, क्रॉस-साइट स्क्रिप्टिंग XSS, और टूटे हुए एक्सेस कंट्रोल जैसी वास्तविक कमजोरियों का शोषण करक...

CVE-2026-77235

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77236

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77236 Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...