miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel 위협 헌팅 언어 |readthedocs| |pypi| |downloads| |codecoverage| |black| | Hunt with Native Query/Script left or Kestrel right? 종단간 사이버 위협 헌트는 일반적으로 여러 데이터 소스/환경에서의 실행과 헌트플로우 어디서든...

SindriKit

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

taser

Taser TASER Testing and Security Resource는 공격 보안 도구 제작 과정을 간소화하기 위해 사용되는 추상화 라이브러리입니다. 다양한 프로토콜과 클래스를 통해 모의 침투 중 커스텀 도구 개발을 효율적으로 진행할 수 있습니다. examples 디렉토리에는 사용법을 보여주는 여러 스크립트와 침투 테스터, 레드팀, 버그 바운티 헌터에게 유용한 도구가 포함되어 있습니다! ⚠ 경고: Taser는 작업 중인 라이브러리이며, 호환성을 깨는 변경 사항이 발생할 수 있습니다. 설치 옵션 1: 개발 버전 최신 코드 ...

web2py-e94946d-CVE-2016-3957

Readme web2py는 빠르고, 확장 가능하며, 안전하고, 이식 가능한 데이터베이스 기반 웹 애플리케이션을 신속하게 개발하기 위한 무료 오픈소스 풀스택 프레임워크입니다. Python으로 작성되었으며 Python으로 프로그래밍할 수 있습니다. LGPLv3 라이선스 자세한 내용은 http://web2py.com 에서 확인하십시오. Google App Engine 배포 root@kitploit: cp examples/app.yaml ./ cp handlers/gaehandler.py ./ 그런 다음 ./app.yaml을 편집하고...

cve-2026-9082

CVE-2026-9082 タイプ : SQLインジェクション CWE-89 影響を受ける製品 : Drupal Core データベース抽象化API Drupal Advisory : SA-CORE-2026-004 公開日 : 2026年5月20日 深刻度 : 非常に重大 Drupal 20/25 | NVD CVSS 6.5 概要 CVE-2026-9082は、Drupalのコアデータベース抽象化APIにおけるSQLインジェクション...

CVE-2026-9082

🚨 CVE-2026-9082 : Drupal Core의 SQL 인젝션 취약점 Drupal Core의 고영향 SQL 인젝션 취약점 PostgreSQL 📋 개요 CVE-2026-9082 는 Drupal Core의 데이터베이스 추상화 계층에 있는 SQL 인젝션 취약점입니다. 이는 데이터베이스 백엔드로 PostgreSQL 을 사용하는 사이트에만 영향을 미칩니다. 이 취약점으로 인해 인증되지 않은 공격자가 임의의 SQL 인젝션을 수행할 수 있으며, 잠재적으로 데이터 유출, 권한 상승, 최악의 경우 원격 코드 실행으로 이어질 수 있습니다...

[SECURITY] Fedora 45 Update: PackageKit-1.4.0-1.fc45

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. 機能と特徴 次の機能はConnection Managerに組み込まれています: - 汎用プラグイン基盤 - デバイスとネットワークの抽象化（基本的なストレージサポート付き） - IPv4、IPv4-LL（リンクローカル）およびDHCP - RFC 5227に準拠したIPv4アドレス競合検出（ACD） - IPv6、DHCPv6および6to4トンネル - 高度なルーティングとDNS設定 -...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104992 advisory. Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input,...

CVE-2026-79019

A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the way RTAS handled memory accesses in user space for kernel communication. In a guest system that is under lockdown usually due to Secure Boot, running on top of PowerVM or KVM hypervisors pseries platform, a root-like local user could exploit this flaw to further...

Astra Linux – Vulnerability in Linux

The file arch/powerpc/kvm/book3srtas.c in the Linux kernel, as of version 5.13.5 on the PowerPC platform, allows KVM guest OS users to cause memory corruption in the host OS through rtasargs.nargs, also known as CID-f62f3c20647e...

EUVD-2024-55693

An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...

JLSEC-2026-767 A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit...

EUVD-2026-35400

TYPO3 CMS has Broken Access Control in its File Abstraction Layer...

GHSA-JF56-V8JC-JCC5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer

Problem The path allowance check in GeneralUtility::isAllowedAbsPath performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var/www/html-other/secret.yaml to be incorrectly accepted as valid when the project root was /var/www/html...

TYPO3 CMS has Broken Access Control in its File Abstraction Layer

Problem The path allowance check in GeneralUtility::isAllowedAbsPath performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var/www/html-other/secret.yaml to be incorrectly accepted as valid when the project root was /var/www/html...

CVE-2026-49738

The path allowance check in GeneralUtility::isAllowedAbsPath performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var/www/html-other/secret.yaml to be incorrectly accepted as valid when the project root was /var/www/html. Administrator...

CVE-2026-49738

The path allowance check in GeneralUtility::isAllowedAbsPath performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var/www/html-other/secret.yaml to be incorrectly accepted as valid when the project root was /var/www/html. Administrator...