In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.

...

ida_ifl

IFL - Elenco interattivo delle funzioni Licenza: CC-BY https://creativecommons.org/licenses/by/3.0/ Un piccolo plugin con l'obiettivo di fornire un modo intuitivo per navigare tra le funzioni e i loro riferimenti. Inoltre, consente di importare report generati ad esempio da PE-sieve in IDA...

the-backdoor-factory

La nuova versione di BACKDOOR FACTORY è disponibile! Accedi qui: https://github.com/sponsors/secretsquirrel ATTENZIONE: Le Pull Request VERRANNO IGNORATE E CHIUSE. The Backdoor Factory BDF Solo per professionisti della sicurezza e ricercatori. L'obiettivo di BDF è patchare eseguibili binari con l...

pics

Benvenuti! Poster binari 25 poster 2017-10-30 59 tracciati 2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626...

BGGP

Binary Golf Grand Prix Questo repository contiene i file del Binary Golf Grand Prix, suddivisi per anno. BGGP è una competizione annuale di file di piccole dimensioni, in cui i partecipanti creano i file più piccoli possibili che eseguono una funzione specifica. I file non possono superare i 4096...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing-fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

CVE-2022-46364

CVE-2022-46364 — Apache CXF MTOM/XOP SSRF File Read Proof-of-Concept exploit for CVE-2022-46364 — an Apache CXF server-side request forgery SSRF vulnerability in MTOM/XOP request processing. Vulnerability Summary CVE-2022-46364 affects Apache CXF versions before 3.4.10 and 3.5.5. When MTOM Messag...

awesome-game-security

awesome-game-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of art 🫡 NeverC & NeverD — Your Compiler & Decoder for the AI Era As AI agents increasingly...

Linux Distros Unpatched Vulnerability : CVE-2026-107817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysqljson plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-107821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently...

angr 10.0.3

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

pymap

pymap — SQL injection discovery & exploitation toolkit Two co...

osed-scripts

osed-scripts Maßgeschneiderte Werkzeuge für den Windows-Usermode-Exploit-Dev-Kurs OSED von Offensive Security Inhaltsverzeichnis Eigenständige Skripte egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg-Skripte find-ppr.py find-bad-chars.py search.py Eigenständige...

GHSA-4JFQ-PMQ9-257H ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

Summary The AoE3 POST /game/cloud/getFileURL handler in luskaner/ageLANServer's bundled game server decodes an attacker-controlled names JSON array and immediately allocates response storage sized directly from the array's length makei.A, lenreq.Names.Data, with no request body size limit and no...

ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

Summary The AoE3 POST /game/cloud/getFileURL handler in luskaner/ageLANServer's bundled game server decodes an attacker-controlled names JSON array and immediately allocates response storage sized directly from the array's length makei.A, lenreq.Names.Data, with no request body size limit and no...

msynth

msynth Autore: Tim Blazytko e Moritz Schloegel msynth è un framework di deoffuscamento del codice per semplificare espressioni Mixed Boolean-Arithmetic MBA. Dato un oracolo di semplificazione precalcolato, attraversa un'espressione complessa rappresentata come albero sintattico astratto AST e ten...

SUSE-SU-2026:24129-1 Security update for gcc13

This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

Malicious code in kmf-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04d25dced1e4c2398d7d91568783b983f326444098ecff8ddf7c29468d752c [email protected] is published with the version-number and behavior shape of a dependency-confusion reconnaissance beacon rather than an i18n...

MAL-2026-17747 Malicious code in kmf-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04d25dced1e4c2398d7d91568783b983f326444098ecff8ddf7c29468d752c [email protected] is published with the version-number and behavior shape of a dependency-confusion reconnaissance beacon rather than an i18n...