Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...

CVE-2024-44346

CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

pe-signgen

pe-signgen Cross-version binary signatures and RVA offsets for Windows PE functions Overview pe-signgen is a tool for reverse engineers and security researchers that automatically generates: Binary signatures byte patterns with wildcards for unexported and exported functions RVA and file offsets...

agent

Binary Refinery Skill This repository stores a Claude skill for Binary Refinery. It can augment your malware analysis agent with a number of useful tools for data extraction and transformation. !CAUTION Make sure you are using refinery version 0.10.5 or later. The skill relies on changes to the...

Binvariants

Binvariants: Register-Level Invaraint-Guided Fuzzing for Binaries This repository provides the source code for Binvariants : a prototype fuzzing framework that leverages register-level likely invariant violations for fuzzing binaries. This work is presented in our paper Binvariants: Enhancing...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

REx-skill

REx@Skill Reverse Engineering eXecution Skill Find the defects in a compiled binary — and prove them. Seven subagents, one evidence tree, and a pinned toolchain so two runs are comparable...

CLEANSTART-2026-XU96478 Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints

CVE-2026-68496 affects multiple packages. The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints. See references for individual vulnerability details...

CLEANSTART-2026-OQ29524 CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints

CVE-2026-68495 affects multiple packages. The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints. See references for individual vulnerability details...

UBUNTU-CVE-2026-110735

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

angr 10.0.4

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

CVE-2026-110735

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

Linux Distros Unpatched Vulnerability : CVE-2026-110735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring...

CVE-2026-110849 n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...