pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

go-mal-pkgs

go-mal-pkgs A security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code, bypassing the Go Module Proxy cache. Overview This tool helps protect against supply chain attacks that exploit the Go Module Proxy cache, as recently demonstrated by the...

CVE-2025-66676

CVE-2025-66676 In IOBit Unlocker 1.3.0.11 and earlier, the application allows arbitrary process termination by trying to unlock a file. Background The application is used to unlock a unlocked file. By specifying the process image file of a running process as the locked file, IOBit unlocker will t...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

CVE-2026-99999

CVE-2026-99999 — PwnEscape: detection and mitigation Practical guide in Spanish to determine whether a Linux server is exposed to CVE-2026-99999 "PwnEscape" and how to mitigate it. Includes a script that checks the machine and gives a verdict with the reason. 📋 Summary Field| Value ---|--- CVE|...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It ca...

krb5: Improper authorization via flawed PAC checksum verification

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid...

krb5: Alteration of authentication indicators in CAMMAC container

In MIT krb5 release 1.14 and later since authentication indicator support was added, an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container...

krb5: Improper authorization via flawed PAC checksum verification

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid...

krb5: Alteration of authentication indicators in CAMMAC container

In MIT krb5 release 1.14 and later since authentication indicator support was added, an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container...

CVE-2024-12084

CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths s2length in the code. When MAXDIGESTLEN exceeds the fixed SUMLENGTH 16 bytes, an attacker can write out of bounds in the sum2 buffer. How...

krb5: Alteration of authentication indicators in CAMMAC container

In MIT krb5 release 1.14 and later since authentication indicator support was added, an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container...

krb5: Improper authorization via flawed PAC checksum verification

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid...

krb5: Alteration of authentication indicators in CAMMAC container

In MIT krb5 release 1.14 and later since authentication indicator support was added, an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container...

krb5: Improper authorization via flawed PAC checksum verification

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid...

CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

CVE-2026-99999

CVE-2026-99999 lab probe Go probe for the Linux IPv4 checksum-offload bug known as PwnEscape. It attaches to a TAP you already prepared and checks whether the host fragmenter trusts an IPv4 header rewritten by skbchecksumhelp. The probe handles packet injection and capture. scripts/setup.sh...

WPS-CVE-2022-24934

Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send to client as environment variable:...

krb5: Improper authorization via flawed PAC checksum verification

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid...