python-codext

CodExt 어떤 것이든 인코딩/디코딩하세요. CodExt는 Python2-3 호환 라이브러리로, 네이티브 codecs 라이브러리를 확장하여 새로운 사용자 정의 인코딩 및 문자 매핑 추가 120개 이상의 새로운 코덱 을 제공하며, 이름은 CODecs EXTension 에서 유래했습니다. 또한 여러 인코딩 계층을 디코딩하기 위한 추측 모드 와 편의를 위한 CLI 도구 를 제공합니다.sh $ pip install codext 새 코덱을 기여하고 싶으신가요? | 새 매크로를 기여하고 싶으신가요?...

whad-client

WHAD: ワイヤレスハッキングデバイス このフレームワークは、ワイヤレスプロトコルやデバイスを操作・ハッキング・調査するためのコマンドラインツール群と、互換性のあるファームウェアを実行するハードウェアデバイスで使用する強力なワイヤレスツールを作成するためのライブラリを提供します。 インストール pip を使えばインストールはとても簡単です： pip install whad オンラインドキュメント プロジェクトのドキュメントは ReadTheDocs で公開されています。 ユニットテストの実行 デフォルトの Python...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

9Router <= 0.4.36 - Unauthenticated RCE

9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine 9Router Model Context Protocol（MCP）ブリッジを介して、33層の時間位相カスケード、リーマン・アダマール分散、11 nsウェッジフィルターを展開することで、従来のプロキシおよびプロセス監視防御を回避し、認証なしのリモートコード実行を実行する専門のPythonフレームワークです。 CTT強化エクスプロイトの詳細...

thethe

위협 헌팅 환경 당신은 위협 헌터입니다. 조사 중에 브라우저에서 20개 이상의 탭이 열려 있고, 데이터가 담긴 .txt 파일들이 흩어져 있으며, 배경에 몇몇 터미널이 떠 있는 자신을 발견한 적이 있나요? theTHE는 조사에 관한 모든 정보를 단일 프로젝트로 중앙집중화하고 그 결과를 귀하의 팀과 공유합니다다른 사람과는 공유하지 않음. theTHE는 API 응답을 캐시하므로 요청을 반복할 필요가 없습니다. 키를 공유하지 말고 사용자가 서비스에 직접 호출하도록 하십시오. theTHE는 또한 일부 명령줄 도구가 통합되어 있어 터미널...

regipy

regipy ⚠️ v6.0.0 中的破坏性变更 版本 6.0.0 包含重大的现代化变更： 需要 Python 3.9+ - 放弃了对 Python 3.6、3.7 和 3.8 的支持 移除了attrs 库 - 数据类现在使用 Python 内置的 dataclasses 模块 如果你的代码导入了内部类（Cell、VKRecord、Value、Subkey）并使用了 attr.asdict 等 attrs 函数，请改用 dataclasses.asdict 完整详情请参阅 CHANGELOG。 Regipy 是一个用于解析离线注册表配置单元（带有 REGF 头的 Hive 文件）的...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

frida v17.17.1-barebone.18

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

Exploit for CVE-2026-46339

CTT-Enhanced-CVE-2026-46339-Exploit-Engine A specialized Pytho...

[SECURITY] Fedora 43 Update: xen-4.20.4-1.fc43

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

EUVD-2026-44808

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/ and /api/mcp/, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP...

CVE-2026-46339 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/ and /api/mcp/, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP...

PYSEC-2026-2908 PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py: "registers four file-handling tools by default, praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and...

MAL-2026-7005 Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

PT-2026-42036

Name of the Vulnerable Software and Affected Versions 9router versions 0.4.30 through 0.4.36 Description 9router contains a flaw where the Next.js middleware fails to protect several API endpoints, allowing unauthenticated network-adjacent attackers to execute arbitrary OS commands as the user...

EUVD-2019-17185

Malware in sbrugna...

EUVD-2019-0003

Malware in sbrugna...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: buf, trivy, nerdctl, openfga, dagger, docker-cli-buildx, wolfictl, k9s, opentelemetry-collector, syft, cadvisor, docker-compose, osv-scanner, melange, trufflehog, kargo, tw, splunk-otel-collector, buildah, goreleaser, zot, zarf, falcoctl, spire-server, apko,...