CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

BabyShark

EINFÜHRUNG Dies ist ein einfacher generischer C2-Server, geschrieben in Python und Flask. Dieser Code basiert auf der Idee von GTRS, welches Google Translate als Proxy zum Senden von Befehlen an den infizierten Host nutzt. Das BabyShark-Projekt zielt darauf ab, Reverse-Verbindungen mit Agents zu...

CVE-2026-74770

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-34220

Human Resource Management System Project in PHP and MySQL Free Source Code 提出者: Kha Do ベンダー: SourceCodester 影響を受けるバージョンおよび/または修正済みバージョン 脆弱性のあるファイル applyleave.php 問題の種類 脆弱性の種類 SQLインジェクション 影響 攻撃者はこの脆弱性を悪用してデータベースの権限を取得でき、その結果、データベース内の大量のデータが漏洩する可能性があります。相手のデータベースにDBA権限がある場合、サーバーホストの権限が取得される可能性があります...

CVE-2026-71054

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

FDD-book

Brazilian Portuguese Edition ptBR This directory contains the Brazilian Portuguese translation of the book FreeBSD Device Drivers: From First Steps to Kernel Mastery. The disclaimer below is provided first in English and then in Brazilian Portuguese so that readers coming from either language can...

CVE-2026-54245

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an...

CSS-Keylogging

CSS Keylogger Estensione Chrome e server Express che sfruttano le capacità di keylogging dei CSS. Per usare Configurare l'estensione Chrome 1. Scaricare il repository git clone https://github.com/maxchehab/CSS-Keylogging 2. Visitare chrome://extensions nel browser oppure aprire il menu Chrome...

django-defender

django-defender .. image:: https://jazzband.co/static/img/badge.svg :target: https://jazzband.co/ :alt: Jazzband .. image:: https://img.shields.io/pypi/pyversions/django-defender.svg :alt: Versioni Python supportate :target: https://pypi.org/project/django-defender/ .. image::...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Subrake

Subrake 🦅 Ein automatisierter DNS-Scanner und -Werkzeug Zone Transfer, DNS-Zonenübernahme, Subdomain-Übernahme. Hintergrund 📈 Subrake begann ursprünglich als persönliches Projekt zur Subdomain-Enumeration und ist nun ein detailliertes DNS-Scanning-Tool, das dir hilft, Zone Transfers ,...

keyFinder

KeyFinder Rilevamento passivo di chiavi API e segreti per Chrome e Firefox KeyFinder è un'estensione per browser per Chrome e Firefox che analizza passivamente ogni pagina visitata alla ricerca di chiavi API, token, segreti e credenziali trapelati. Funziona silenziosamente in background senza...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploração da Vulnerabilidade de Execução Remota de Código CVE-2024-7954 Projeto de Teste de Vulnerabilidade de Software Enviado por: Shivansh Kuntal Visão Geral Este projeto demonstra a exploração da CVE-2024-7954 , uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta o SPIP CM...

CheeseTools

CheeseTools Questo repository è stato creato basandosi sul già esistente MiscTool, quindi un grande ringraziamento a rasta-mouse per averli rilasciati e per avermi dato la giusta motivazione per lavorarci. CheeseExec Esecuzione comandi / Movimento laterale tramite funzionalità simile a PsExec. De...

browser-backdoor

BrowserBackdoor O BrowserBackdoor é uma aplicação que utiliza uma backdoor JavaScript via WebSocket para conectar-se ao listener...

binbloom

Informazioni Lo scopo di questo progetto è analizzare un firmware binario grezzo e determinare automaticamente alcune delle sue caratteristiche. Questo strumento è compatibile con tutte le architetture poiché, fondamentalmente, esegue semplici statistiche su di esso. Caratteristiche principali:...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

needrestart

needrestart About needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package. There are some hook scripts in the ex/ directory to be used with apt and dpkg. The scripts will call needrestart after any package...