QLOG

Update July, 2022 We started QLOG as an experiment to learn more about Windows ETW. QLOG provides enriched Logging for process creation events on Windows. We have stopped development of QLOG because in the meantime free tools were published which use ETW for telemetry and do a way better job than...

AuroraStore

Aurora Store Aurora Store enables you to search and download apps from the official Google Play store. You can check app descriptions, screenshots, updates, reviews, and download the APK directly from Google Play to your device. To use Aurora Store, log in using Google Play account, when you firs...

Aurora-Incident-Response

Aurora Incident Response Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders. Aurora brings "Spreadsheet of Doom" used in the SANS FOR508 class to the next level. Having led many cases and taught so many students how to do IR right, I realized, that...

aurora

Aurora This is a proof-of-concept web app built on top of Frida. To get started: npm install grunt server Then point your web browser at http://127.0.0.1:8010/...

aurora-demo-lockfile

aurora-demo-lockfile Demo target for AURORA — the UiPath for Coding Agents challenge submission at mlbrilliance/uipath-for-coding-agents. This repo intentionally contains three vulnerable lockfiles so AURORA's Maestro process OssSupplyChainDefender has something to detect, triage, and remediate. ...

CVE-2026-126793

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

EUVD-2026-124717

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

CVE-2026-126793

The AWS Advanced Go Wrapper is vulnerable to an untrusted search path issue within the Aurora PostgreSQL dialect detection. This flaw affects versions from release 2026-04-06 (awssql/v2.0.0) up to, but before, release 2026-07-29 (awssql/v2.0.3) . A remote authenticated user could exploit this by ...

CVE-2026-126793 Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

CVE-2026-126793 Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

PT-2026-146060

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

CVE-2026-126793: AWS aws-advanced-go-wrapper: An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release…

An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...

Aurora

Aurora RAT About Aurora RAT or Remote Administration Tool is written in Go. This project was started to learn networking in go and get myself started in the security field. Usage Compile and run Main.go then run the stub on whatever computer you wish to control. Stub The stub can be found here...

CVE-2026-119924

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119923

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

CVE-2026-119924

An out-of-bounds read vulnerability exists in the TDS RPC procedure-name parser within the Babelfish for PostgreSQL extension and Amazon Aurora PostgreSQL with Babelfish . The flaw occurs when processing a malformed TDS RPC request sent to the TDS port (default 1433). This could allow remote auth...

EUVD-2026-118419

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119923

A heap-based buffer overflow exists in the TDS prelogin parser of the Babelfish for PostgreSQL extension (versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4) and in Amazon Aurora PostgreSQL with Babelfish . This vulnerability allows remote attackers to execute arbitrary OS commands as the dat...

CVE-2026-119923 Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

PT-2026-138393

Name of the Vulnerable Software and Affected Versions Babelfish for PostgreSQL versions 1.0 through 1.5 Babelfish for PostgreSQL versions 2.1 through 2.15 Babelfish for PostgreSQL versions 3.1 through 3.12 Babelfish for PostgreSQL versions 4.0 through 4.8 Babelfish for PostgreSQL versions 5.1...