herpaderping

Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

protocol-fuzzer-ce

:toc: = GitLab Protocol Fuzzer Community Edition This project is based on Peach Fuzzer Professional v4 which was https://about.gitlab.com/press/releases/2020-06-11-gitlab-acquires-peach-tech-and-fuzzit-to-expand-devsecops-offering.htmlaquired by GitLab in 2020. Some features of Peach Fuzzer...

CVE-2023-31704

CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...

CVE-2025-31200

CVE-2025-31200: CoreAudio APAC Channel Remapping Buffer Overflow Vulnerability Overview CVE-2025-31200 is a buffer overflow vulnerability in Apple's CoreAudio framework affecting the Apple Positional Audio Codec APAC decoder. The bug exists in the APACChannelRemapper::Process function within...

CookieViz

CookieViz Français CookieViz est un outil de visualisation qui permet de mesurer l'impact des cookies lors de votre propre navigation. Cookieviz analyse les interactions entre un navigateur et des sites et serveurs distants. Vous pourrez savoir à quels autres acteurs le site que vous visitez envo...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

CVE-2025-51859

CVE-2025-51859 漏洞描述 Chaindesk 是一个用于构建 AI 智能体的 Web 应用程序，其智能体聊天组件存在存储型跨站脚本（XSS）漏洞。攻击者可以通过构造 AI 智能体并使其系统提示词指示底层大语言模型（LLM）在聊天响应中嵌入恶意脚本载荷（例如基于 SVG 的 XSS），从而在客户端执行任意脚本。当用户与这类恶意智能体交互，或访问包含 XSS 载荷的会话直接链接时，脚本会在用户浏览器中执行。成功利用该漏洞可导致敏感信息（如 JWT 会话令牌）被窃取，进而可能造成账户劫持。会话 URL...

awswaf

AWS WAF Amazon Web Services Web Application Firewall Solver Overview This project provides a Golang & Python-based solver for the AWS WAF challenge. It supports both the type "token" / "Invisible" and type "Captcha" using gemini ⭐️ Show Your Support Please star the repository if you find it useful...

Flipper

Playground and dump of stuff I made, modified, researched, or found for the Flipper Zero. Looking for Infrared IR codes? Head over tothe IRDB! Just want to download part of any repo? Try over here! If you're new to github in general, check out this great guide from Wr3nch! Other great spots for...

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

rails-exploit-cve-2013-0156

== Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 Bootstrapped a Rails 3.2.10 application with the remote code execution exploit. Ref: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Setup Install gem dependencies and fire up the...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

XFLTReaT

XFLTReaT This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunnelling tools for each protocols, this must be your tool ^W framework. If you are interested in the details, please read the Wiki. Available modules TCP UDP ICMP SOCKS v4, 4a, ...

CVE-2022-26134

CVE-2022-26134 Remote attackers, without authentication, can construct OGNL expressions for injection, achieving arbitrary code execution on Confluence Server or Data Center. Modified PoC for easy get shell. Common port: 8090 Affected Versions Confluence Server and Data Center = 1.3.0 7.14.0 =...

pig

Pig Pig which can be understood as Packet intruder generator is a Linux packet crafting tool. You can use Pig to test your IDS/IPS among other stuff. Pig brings a bunch of well-known attack signatures ready to be used and you can expand this collection with more specific things according to your...

EUVD-2026-76158

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-9160

CVE-2026-9160 is a template engine vulnerability in Arma Digital Media Inc. Website Template (affected through version 11092026 ). The root cause is improper neutralization of special elements in the template engine, which allows code injection . The vulnerability is rated CVSS 4.3 (MEDIUM) with ...

CVE-2026-9160 CSTI in Arma Digital's Website Template

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...