1331397 matches found
CVE-2026-123280
In JetBrains Datalore versions prior to 2026.2.4 , an incorrect authorization vulnerability (CWE-863) allows unauthenticated users to execute arbitrary code. The attack vector is triggered through published interactive reports . This vulnerability has a High base severity (CVSS 3.1: 8.1), potenti...
CVE-2026-123278
In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...
CVE-2026-123279
In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...
CVE-2026-123278
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...
CVE-2026-123276
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...
CVE-2026-123276
JetBrains CLion versions before 2026.3 (specifically 2026.2.4.1 ) are vulnerable to code execution when running in Safe Mode . The root cause is the inclusion of functionality from an untrusted control sphere (CWE-829) triggered via a crafted GDB server debug profile . This vulnerability has a Hi...
shuffledns
massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature β’ Install β’ Run β’ Wildcard β’ License β’ Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...
ElfDoor-gcc
ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd ElfDoor-gcc chmod ...
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
cspparse
cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...
MalQR.github.io
MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...
PageTableInjection
PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...
idacode
IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...
PulseAPK
PulseAPK π Languages English | Deutsch | EspaΓ±ol | FranΓ§ais | Χ’ΧΧ¨ΧΧͺ | νκ΅μ΄ | ΠΠ΅Π»Π°ΡΡΡΠΊΠ°Ρ | Suomi | LatvieΕ‘u | Eesti | LietuviΕ³ | ΔeΕ‘tina | SlovenΔina | Magyar | Ψ§ΩΨΉΨ±Ψ¨ΩΨ© | PortuguΓͺs | Π ΡΡΡΠΊΠΈΠΉ | Π£ΠΊΡΠ°ΡΠ½ΡΡΠΊΠ° | δΈζ π‘ Looking for a cross-platform alternative? Download PulseAPK Core here:...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...
inceptor
π© This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ π© Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...
ios-malicious-bithunter
iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...
lfi
Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...
retdec
Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...