MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 A video presentation analysing the technical details, scale and lessons to be learned from the MOVEit CVE-2023=3462CS50 Introduction to Cyber Security Finale Project Video Link : https://youtu.be/EsyWXNcmNQY...

YAASA

YAASA YAASA Yet Another APK Static Analyzer is a framework for having fun with analyzing APKs. The project is using the tools below and is built on Django framework: APKTool: A tool for reverse engineering Android apk files AxmlParserPY: Python AxmlParser PlagueScanner: Open source multiple AV...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net: qlogic: qlcnic module, a NULL pointer dereference occurred in qlcnic83xxaddrings. In qlcnic83xxaddrings, the indirect function ahw-hwops-allocmbxargs is called to allocate memory for cmd.req.arg. A dereference of this...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The issue in fdt: fix off-by-one error in unflattendtnodes Commit 78c44d910d3e “drivers/of: Fix depth when unflattening devicetree” forgot to fix the depth check in the loop body of unflattendtnodes. This could lead to an overflo...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A NULL pointer dereference occurred in amdgpudmconnectoraddcommonmodes. In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode assigns mode to mode, and mode is directly passed to drmmodeprobedadd...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: Fixed the TOCTOU race condition in raininterrupt. In the interrupt handler raininterrupt, the check for buffer fullness on rain-buflen is performed before acquiring rain-buflock. This creates a Time-of-Chec...

Astra Linux – Vulnerability in libsndfile

In version 1.2.2 of libsndfile, there is a buffer overflow issue in the oggvorbis.c file, specifically in the vorbisanalysiswrote out-of-bounds read function...

CVE-2025-55182-Researching-process

CVE-2025-55182 Research Repository Ethical Disclaimer This repository is dedicated to defensive cybersecurity research and educational purposes only. All content is focused on: Understanding vulnerabilities for defensive purposes Developing detection mechanisms Implementing mitigation strategies...

reposherlock

RepoSherlock English | Türkçe Drop a GitHub repo URL or local path and get architecture, run guidance, risks, and actionable issues. Live CLI Preview Why RepoSherlock Before you run: understand architecture. Before you trust: see security and license risks. Before you waste time: start with...

CVE-2022-1068

CVE-2022-1068 Analysis and Reproduction of Modbus Slave Buffer Overflow Vulnerability CVE-2022-1068 Reference: https://mp.weixin.qq.com/s/5InTTej26aDFzQgB8l6MHw Disclaimer: This article is only for the purpose of technical exchange, learning, and research. It is strictly prohibited to use the...

VulTriage

An intelligent vulnerability detection framework based on Large Language Models and static code analysis, supporting multi-dataset evaluation and ablation studies. 📋 Table of Contents Introduction Key Features System Requirements Quick Start Usage Datasets & Models FAQ Introduction This project i...

agent

Binary Refinery Skill This repository stores a Claude skill for Binary Refinery. It can augment your malware analysis agent with a number of useful tools for data extraction and transformation. !CAUTION Make sure you are using refinery version 0.10.5 or later. The skill relies on changes to the...

RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis

1. C2 Connection – IP 198.46.86.63 Network analysis reveals that RedLine Stealer establishes a connection to the remote IP address 198.46.86.63. This IP is likely the malware's Command & Control C2 server, used for data exfiltration and command delivery. Key Observations: IP Address: 198.46.86.63...

CanoP

CanoP CLI A fast, standalone static analysis tool designed specifically to detect vulnerabilities introduced by AI coding assistants. CanoP analyzes your codebase locally to identify security risks in AI-generated code. Features High Signal-to-Noise Ratio : Traditional scanners produce overwhelmi...

REx-skill

REx@Skill Reverse Engineering eXecution Skill Find the defects in a compiled binary — and prove them. Seven subagents, one evidence tree, and a pinned toolchain so two runs are comparable...

kcmapper

KcMapper KcMapper is a tool for exporting Keycloak configuration data into a Neo4j graph database. This representation allows for the analysis of relationships between realms, clients, users, groups, and roles. The tool includes a web interface to run pre-defined Cypher queries for analysis and...

angr 10.0.4

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

Joern 4.0.656

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

CVE-2026-104751

The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it...

Malicious code in @mntv-analysis/workspaces-components (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 65.11.3 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', whic...