tusk-cli

!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...

CustomProcessingUnit

Custom Processing Unit Custom Processing Unit is the first dynamic analysis framework able to hook, patch and trace CPU microcode at the software level. It works by leveraging undocumented instructions in Intel CPUs that allow access to the CRBUS. Using our microcode decompiler we reverse...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Diameter Protocol Credit‑Control Bypass in 5G Program Code Python Diameter sim diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit retu...

CVE-2024-31317

CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

Swift-Attack

Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

PHPunit-Exploit

PHPunit Exploiter + Checker CVE-2017-9841 Overview : PHPUnit is a unit test framework for the PHP programming language. This is a sample xUnit architecture for a unit testing framework that originated with SUnit and became popular with JUnit. PHPUnit was created by Sebastian Bergmann Installation...

Unit42-Threat-Intelligence-Article-Information

Unit42-Threat-Intelligence-Article-Information This is the repository for indicators of compromise IOCs and other data supporting threat intelligence articles posted on the Palo Alto Networks Unit 42 website...

Unit42-timely-threat-intel

Unit42-Timely-Threat-Intel This repository contains files with indicators supporting social media posts designed to disseminate timely threat intelligence data from Palo Alto Network's Unit 42 team. This information is provided "as is" to the public...

CVE-2026-98903

A flaw was found in the Linux kernel's i.MX Messaging Unit MU mailbox driver. A local user could exploit a race condition during channel shutdown to cause a Denial of Service DoS. When a mailbox channel is closed while an interrupt is actively being processed, the receive event can be inadvertent...

gatekeeper-cve-2020-8554

Gatekeeper constraint for CVE-2020-8554 Install OPA client Follow the instructions. Run unit tests $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

CVE-2026-25596

CVE-2026-25596 — Stored XSS via Product Unit Name in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Product Unit Name field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8...

UTopia

Introduction UTopia is a tool for automatically generating fuzz drivers from unit tests. UTopia will let developers perform fuzz testing without special knowledge about writing fuzzers. Even developers familiar with fuzzing can save significant time by generating fuzz drivers automatically. UTopi...

CVE-2026-93336

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

EUVD-2026-108266

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336 Missing authorization in the unit resources download route in Juju controllers

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58079)

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...

PT-2026-116359

Name of the Vulnerable Software and Affected Versions Themify Popup versions prior to 1.4.8 Description The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and output...