objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

n8n-CVE-2025-68613-exploit

n8n - CVE-2025-68613: Improper Control of Dynamically-Managed Code Resources Vulnerability n8n contains a critical Arbitrary Code Execution vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configurati...

Malicious code in mfasolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f583d18816b977d3e721da8423405533e9915ad13631d8114e40e54aefd9152 package.json at line 41 declares the only runtime dependency node-net-pool as...

MAL-2026-17663 Malicious code in mfasolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f583d18816b977d3e721da8423405533e9915ad13631d8114e40e54aefd9152 package.json at line 41 declares the only runtime dependency node-net-pool as...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 Code execution Proof of Concept Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys The buffer overflow vulnerability was found in the "/userfs/bin/tcapi" binary which is used as a wrapper for the "Diagnostics"...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

SetupHijack

SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...

semgrep

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

CVE-2021-4044

SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...

AutoProber

AutoProber AutoProber is the hardware hacker's flying probe automation stack for giving your agent everything it needs to go from "there's a new target on the plate" to probing individual pins in a safe way. Demo video: https://gainsec.com/autoprober-demo-mp4/ Flow 1. Tell the agent to ingest the...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

pyMalleableC2

pyMalleableC2 A Python interpreter for Cobalt Strike Malleable C2 profiles that allows you to parse, modify, build them programmatically and validate syntax. Supports all of the Cobalt Strike Malleable C2 Profile grammar starting from Cobalt Strike version 4.3. It's not backwards compatible with...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

The containerd overlaybd component (versions through 1.0.18 ) contains an integer overflow vulnerability in the do_load_index (LSMT index loading) function. This flaw occurs during the processing of index_bytes, potentially leading to an out-of-bounds heap access . The vulnerability can be trigge...

EUVD-2026-94691

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2020-9283

Exploit for CVE-2020-9283 This project is inspired by the original POC found here github.com/mark-adams/exploits/CVE-2020-9283. I was curious as to how the Go SSH library was implemented so decided to implement the PoC using go. A short writeup can be found here...