OpenMalleableC2

OpenMalleableC2 Open Source Implementation of Cobalt Strike's Malleable C2 OpenMalleableC2 is a framework-agnostic library that implements Cobalt Strike's Malleable C2 profile format for HTTP transformations. It enables security researchers and red teams to easily implement malleable C2...

yaraast

yaraast Parse, analyze, and transform YARA rules with a Python AST toolkit Overview yaraast is a Python library for parsing and manipulating YARA-family rules using Abstract Syntax Trees AST. It supports classic YARA, YARA-L, and YARA-X workflows with automatic dialect detection and CLI tooling...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

pip3line

pip3line Raw bytes manipulation utility, able to apply well known and less well known transformations. The developpement and main page as moved to : https://github.com/metrodango/pip3line...

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

XIP

XIP Description XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc. asciicast Further explaination on our blog post article Usage python3 xip.py --help Docker alternative Official image You can pull the...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

CVE-2025-32432-PoC

CVE-2025-32432 Exploit Scripts Python PoC Pre-auth Remote Code Execution for CraftCMS 3.x / 4.x / 5.x PoC Maintainer: C.T.Y. research use only Vulnerability Discovery: Nicolas Bourras – Orange Cyberdefense Additional PoC Inspiration: SensePost research & Chirag Artani’s public script 1. Overview...

cve-2024-32002-demo

High-Performance Data Processing Suite Production-ready data transformation library with advanced optimizations. Quick Start git clone --recursive https://github.com/srakkk/cve-2024-32002-demo...

Noctyra

Noctyra Noctyra is an AST-based framework designed for code transformation and deobfuscation. It provides a modular pipeline to analyze and simplify Python source code by resolving complex expressions and logic. Overview The project aims to provide a flexible environment for processing Python's...

RLSA-2026:92639 Important: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-pillow security update

An update is available for python-pillow. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

pillow: pillow: Denial of service via double free during image transformation

A flaw was found in Pillow. A remote attacker who can submit large image transformation operations under memory pressure can trigger improper error handling, leading to a double-free vulnerability releasing the same memory block twice. This issue can result in an application crash, causing a Deni...

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

pillow: pillow: Denial of service via double free during image transformation

A flaw was found in Pillow. A remote attacker who can submit large image transformation operations under memory pressure can trigger improper error handling, leading to a double-free vulnerability releasing the same memory block twice. This issue can result in an application crash, causing a Deni...

ALSA-2026:92639 Important: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Security Bulletin: IBM Transformation Extender Advanced is affected by multiple IBM Semeru Runtime vulnerabilities.

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine is affected by multiple vulnerabilities in IBM Semeru Runtime due to eMudhra CA certificate compromise CVE-2026-91403, CVE-2026-114820 Vulnerability Details Refer to the security bulletins listed in the...

VulnCheck KEV: CVE-2026-102785

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...