CVE-2026-76054

CVE-2026-76054 affects Black Duck blackduck-c-cpp versions 1.0.17 through 3.0.6 . When the Black Duck API token is supplied via the BLACKDUCK_API_TOKEN or BD_HUB_TOKEN environment variable, it is inherited by subprocesses launched during build capture and signature scanning. An actor able to exec...

CVE-2026-76054

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...

EUVD-2026-64894

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scansione di 7kbstorm...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2025-52357

CVE-2025-52357 : Advisory di sicurezza: XSS nella console di amministrazione del router FD602GW-DX-R410 Proof of Concept e Advisory di sicurezza per la vulnerabilità di XSS riflesso nella console di amministrazione del router in fibra FD602GW-DX-R410 firmware V2.2.14. Include dettagli, impatto e...

Astra Linux – Vulnerability in glibc

The Name Service Cache Daemon’s nscd netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. This flaw was introduced in glibc 2.15, when the cache was added to nscd. This vulnerability only exists in the nscd binary...

dezlock-dump

dezlock-dump Extrai tudo de um jogo Source 2 em execução Deadlock, CS2, Dota 2 e gera um SDK C++ à prova de patches que resolve offsets em tempo de execução. Sem valores fixos, sem atualizações manuais quando o jogo é atualizado. Início Rápido 1. Baixe da seção Releases ou compile a partir do...

lulzbuster

Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...

dll-injector

Informazioni Come suggerisce il nome, l'applicazione esegue principalmente l'iniezione di una DLL in qualsiasi processo in esecuzione su Windows. Grazie a questo, è in grado di eseguire diverse operazioni su un processo, come caricare una DLL, scaricare una DLL e agganciare le principali funzioni...

deep-C

Deep-C Deep-C è un Android Deep Link Exploitation Framework che decompila automaticamente APK, identifica punti di ingresso esposti e insicuri dei deep link, verifica l'exploitabilità utilizzando analisi statica e verifica AI opzionale , e genera adb Proof-of-Concepts PoCs eseguibili. Deep-C è...

code-shield

protocol-remediator È una MVP che normalizza i finding di vulnerabilità del codice C/C++ di protocolli/piattaforme in prove riproducibili e verifica le patch candidate su una copia isolata. Poiché code-shield era un nome di lavoro con un rischio accertato di conflitto di denominazione, per il...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

CVE-2026-16723

CVE-2026-16723 Exploit Eine eigenständige C++17-Implementierung für CVE-2026-16723 , eine kritische Sicherheitslücke, die Fastjson -Versionen 1.2.68 – 1.2.83 betrifft. Anforderungen Linux oder WSL unter Windows C++17-kompatibler Compiler GCC 7+ oder Clang 5+ CMake 3.10 oder neuer Systempakete:...

class-dump

class-dump class-dump è un'utility da riga di comando per esaminare il segmento Objective-C dei file Mach-O. Genera le dichiarazioni per le classi, le categorie e i protocolli. Queste sono le stesse informazioni fornite usando 'otool -ov', ma presentate come normali dichiarazioni Objective-C. La...

RunPE

RunPE Caricatore riflessivo in C per binari non gestiti. Utilizzo root@kitploit: Usage: RunPE.exe e.g. RunPE.exe C:\Windows\System32\net.exe localgroup administrators Alternative usage: RunPE.exe ---f ---b ---a e.g: RunPE.exe ---f C:\Windows\System32\svchost.exe ---b ---a Opzioni di configurazion...

libpeconv

libPeConv Una libreria per caricare e manipolare file PE. Obiettivi L'obiettivo di libPEConv era quello di creare un "coltellino svizzero" per il caricamento personalizzato di file PE. Raccoglie varie funzioni di supporto che puoi integrare rapidamente nel tuo loader personale. Ad esempio:...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...