zeroturnaround__zt-zip_CVE-2018-1002201_1-12

ZIP - convenience methods Continuous Integration Quick Overview The project was started and coded by Rein Raudjärv when he needed to process a large set of large ZIP archives for LiveRebel internals. Soon after we started using the utility in other projects because of the ease of use and it just...

filekey

🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...

CVE-2021-42558

CVE-2021-42558: Multiple Cross-Site Scripting in MITRE Caldera Caldera versions =2.8.1 contains multiple reflected, stored and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers. Vendor Disclosure: The vendor's disclosure for this vulnerability can be...

rewind

README Rewind is a snapshot-based coverage-guided fuzzer targeting Windows kernel components. The idea is to start from a snapshot of a live running system. This snapshot is composed of the physical memory pages along with the state of the cpu. This state is used to setup the initial state of a...

CVE-2026-85081 Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass

The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...

s3cXSSer

s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

CVE-2025-56380

CVE-2025-56380 — Time-based Blind SQL Injection in Frappe / ERPNext frappe.client.getvalue 📌 Summary A time-based blind SQL injection vulnerability was discovered in the frappe.client.getvalue API endpoint in Frappe Framework v15.72.4 and present in ERPNext v15.67.0 codebase. An authenticated use...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow...

VICIdial - SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. id: CVE-2024-8503 info: name: VICIdial - SQL Injection author: s4e-io severity: critical description:...

keystone

Keystone Engine Keystone は、軽量でマルチプラットフォーム・マルチアーキテクチャ対応のアセンブラフレームワークです。 他の追随を許さない以下の特徴があります。 マルチアーキテクチャ対応。Arm、Arm64（AArch64/Armv8）、Ethereum Virtual Machine、Hexagon、Mips、PowerPC、RISC-V、Sparc、SystemZ、X86（16/32/64ビットを含む）をサポート。 クリーンでシンプル、軽量、直感的なアーキテクチャ非依存の API。 C/C++...

CVE-2026-100504

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

CVE-2026-100504 Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

EUVD-2026-87373

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

CVE-2026-100504 Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

WhatWeb

WhatWeb - 次世代ウェブスキャナー 開発者: Andrew Horton urbanadventurer & Brendan Coles bcoles 最新リリース: v0.6.4. 2026年4月3日 ライセンス: GPLv2 本製品は、ライセンス契約に記載された条件に従うものとします。WhatWebの詳細については、https://github.com/urbanadventurer/ をご覧ください。 Wiki: https://github.com/urbanadventurer/WhatWeb/wiki/...

openSUSE 16 Security Update : cjose (openSUSE-SU-2026:21944-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21944-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow bsc1279844. -...

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

rhuss__jolokia_CVE-2018-1000129_1-4-0

Jolokia is a fresh way to access JMX MBeans remotely. It is different from JSR-160 connectors in that it is an agent-based approach which uses JSON over HTTP for its communication in a REST-stylish way. Multiple agents are provided for different environments: WAR Agent for deployment as web...