CVE-2023-23752

This is a conversion of Ruby language to Python of the vulnerability Joomla! v4.2.8 - Unauthenticated information disclosure. This code is in Exploit-DB written in Ruby by ALEXANDRE ZANNI. I had some issues with the libraries of Ruby and I decided to convert the code to Python and worked well...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

pySigma

pySigma pySigma is a python library that parses and converts Sigma rules into queries. It is a replacement for the legacy Sigma toolchain sigmac with a much cleaner design and is almost fully tested. Backends for support of conversion into query languages and processing pipelines for transforming...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It ca...

avoidz

Avoidz v 1.3 Author: Mascerano Bachir dev-labs Legal Disclamer: The author does not hold any responsibility for the bad use of this tool, remember this is only for educational purpose. Description: This tool Generate encoded powershell with metasploit payloads,convert C, C, py, go Templates to...

POC-CVE-2024-38820

CVE-2024-38820 Proof of Concept Overview This project demonstrates CVE-2024-38820 , a vulnerability in Spring Framework's DataBinder that allows bypassing disallowedFields protection due to locale-dependent case conversion issues. Vulnerability Details CVE ID : CVE-2024-38820 Affected Component :...

riscy-business

riscy-business Article:RISC-Y Business: Raging against the reduced machine. Prerequisites Visual Studio 2022 with the C++ Clang Compiler for Windows 16.0.5 component CMake 3.26 earlier may work, but not recommended riscvm This folder contains the VM host rv64i interpreter. To build: cd riscvm cma...

dangerzone

Dangerzone Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF. | ---|--- Dangerzone works like this: You give it a document that you don't know if you can trust for example, an email attachment. Inside of a sandbox, Dangerzone converts the document to a PD...

ToolsFx

ToolsFx English|中文 Visitors :eyes: Function Encoding wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex custom base serial dict puny code quote printable uuEncode xxEncode escape/escapeAll auto decodecrack...

Burp2Malleable

Burp2Malleable Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles. It lets you take captured/crafted requests from BurpSuite or ZAP, POSTMAN etc. of what you want your traffic to look like/blend in with, and turns them into CobaltStrike...

homoglyphs

THE PROJECT IS ARCHIVED Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

CVE-2026-12670

IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...

EUVD-2026-104462

IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...

CVE-2026-12670 IBM MQ Denial of Service

IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...

CVE-2026-12670

IBM MQ is vulnerable to a Denial of Service (DoS) condition. An authenticated attacker can trigger this by sending a specially crafted message that causes excessive memory operations during character set conversion . No specific patch versions or exploit details are provided in the documents.

Log4jPatcher

Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...