power-pwn

द्वारा अनुरक्षित: हर जगह सुरक्षित AI एजेंट। अवलोकन Power Pwn Microsoft 365 Power Platform और AI सेवाओं के लिए एक आक्रामक और रक्षात्मक सुरक्षा टूलसेट है। मुख्य विशेषताएं, अन्य के अलावा: 💾 PowerDump : व्यापक टेनेंट स्कैनिंग और डेटा संग्रह 🚪 BackDoor : Power Platform वातावरण में स्थायी पहुंच के लिए...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

CVE-2026-108523

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a Server-Side Request Forgery (SSRF) vulnerability in the git-sources Browse API Endpoint component, specifically affecting the outboundTarget.ts file. Manipulation of the repo_url argument can trigger the SSRF, which may be execu...

EUVD-2026-96730

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

apkstudio

APK Studio IDE de código aberto, multiplataforma baseada em Qt6 para engenharia reversa de pacotes de aplicativos Android. Oferece um layout amigável semelhante a uma IDE, incluindo editor de código com suporte a realce de sintaxe para arquivos de código .smali. Funcionalidades Multiplataforma,...

CVE-2026-108522

A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely...

CVE-2026-108522

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a vulnerability in the Login Endpoint (specifically affecting the /api/auth/login file). The root cause is that the login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing ...

CVE-2026-108522 Studio-Saelix Sencho Login Endpoint login improper authentication

A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely...

EUVD-2026-96729

A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

PSBits

PSBits सरल अपेक्षाकृत समाधान जो आपको सामान्य से थोड़ा अधिक गहराई तक जाने में सहायता करते हैं। प्रत्येक फ़ोल्डर में विवरण समझाने वाला अपना स्वयं का readme.md होना चाहिए। यदि नहीं - तो कोड की शुरुआत और इनलाइन में विस्तृत टिप्पणियाँ होती हैं। न्यूज़लेटर: https://gtworek.ck.page/ यदि आप चीज़ों को स्व...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2026-108521

A server-side request forgery (SSRF) vulnerability exists in Studio-Saelix Sencho up to version 0.97.1 . The flaw is located in the isValidRemoteUrl function within the backend/src/utils/validation.ts file of the Add Remote Node API Endpoint component. An authenticated user with node-management p...

EUVD-2026-96728

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

Label Studio - Sensitive Information Exposure

An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...

Label Studio < 1.16.0 - Cross-Site Scripting

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...