tiny_tracer

tinytracer أداة Pin للتتبع: استدعاءات API، بما في ذلك مدخلات ومخرجات الوظائف المحددة الوظائف المحلية المحددة، والوظائف من المكتبات المرتبطة بشكل ثابت تعليمات مختارة: RDTSC، CPUID، INT استدعاءات النظام المضمنة، بما في ذلك معاملات بعض استدعاءات النظام المحددة الانتقال بين أقسام الوحدة المتعقبة مفيد...

api-security-audit-action

Action GitHub : test de sécurité statique des API REST 42Crunch L'action de test de sécurité statique des API REST localise les contrats d'API REST qui suivent la spécification OpenAPI OAS, anciennement connue sous le nom de Swagger et exécute des contrôles de sécurité approfondis sur ceux-ci. Le...

exchange-scanner

ماسح Microsoft Exchange Server الوصف تقوم هذه الأداة بفحص العديد من الخدمات العامة الشائعة على مضيف هدف لاكتشاف Microsoft Exchange Server وتحديد بصمة إصدار برامجه إن أمكن. وللقيام بذلك، تستخدم التقنيات التالية: تحديد بصمة Outlook Web Access OWA عبر ترويسات الاستجابة ومحتويات صفحة تسجيل الدخول...

KaliPackergeManager

KaliPackergeManager kalipm.sh هي أداة قوية لإدارة الحزم في Kali Linux توفر واجهة قائمة سهلة الاستخدام لتبسيط تثبيت الحزم والأدوات المختلفة. تعمل على تبسيط عملية إدارة البرامج وتمكن المستخدمين من تثبيت الحزم من فئات مختلفة بسهولة. الميزات قائمة تفاعلية : استمتع بواجهة قائمة سهلة وبديهية لاختيار...

CVE-2026-107914

Backdrop CMS versions 1.34 (before 1.34.5) and 1.35 (before 1.35.1) fail to sufficiently protect configuration exports when delivering a compressed archive. This vulnerability, categorized under CWE-497 , allows for the exposure of sensitive system information. The risk is partially mitigated bec...

CVE-2026-107914

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by the fact that an export must have been previously requested by someone with the "Synchronize, import, and export...

EUVD-2026-95489

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by the fact that an export must have been previously requested by someone with the "Synchronize, import, and export...

AbxOverflow

Исправления для проблемы, описанной здесь, появились под CVE-2024-34740 / A-307288067: Бюллетень Патч, указанный в бюллетене Два других патча: 1 2 Android Binary XML Внутри Android systemserver многие сервисы хранят своё состояние между перезагрузками в XML-файлах $ adb shell su 0 find /data/syst...

CVE-2026-7826

A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-5759

A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication commands for example, against an instance with no passwor...

MsfMania

MsfMania MsfMania هو إطار عمل متقدم مبني على بايثون لتشويش الحمولات Payload Obfuscation مصمم لتجنب اكتشاف EDR/AV على أنظمة ويندوز. يقوم بإنشاء ملفات تنفيذية متعددة الأشكال Polymorphic من خلال توليد الكود الديناميكي، والتشفير متعدد الطبقات RC4، وانتحال البيانات الوصفية الثنائية. ⚠️ لأغراض تعليمية...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

CVE-2026-107911

A type confusion vulnerability exists in the _read_flags function (src/commands/cmd_dispatcher.c) of FalkorDB before version 4.20.0 . A remote authenticated attacker capable of running GRAPH.QUERY can trigger the flaw because the system accepts a --bolt argument and casts a Redis string object to...

CVE-2026-107911 Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...

CVE-2026-107911 Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...

EUVD-2026-95488

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...

CVE-2026-107910 Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling

An improper authentication vulnerability in the isauthenticated function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an...

CVE-2026-107910

FalkorDB versions before 4.20.0 are vulnerable to an authentication bypass in the is_authenticated function (src/bolt/bolt_api.c ) of the Bolt endpoint. The root cause is fail-open error handling during an empty AUTH command sent to Redis; the system only mandates a password upon receiving a WRON...

EUVD-2026-95487

An improper authentication vulnerability in the isauthenticated function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an...