haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

android-classyshark

ClassyShark Introduzione ClassyShark è uno strumento di ispezione binaria standalone per sviluppatori Android. Può navigare in modo affidabile qualsiasi eseguibile Android e mostrare informazioni importanti come interfacce e membri delle classi, conteggi dex e dipendenze. ClassyShark supporta...

createdump

Windows App LSASS Dump - Prova di concetto Questo progetto dimostra come eseguire il dump del processo LSASS utilizzando lo strumento createdump.exe, un eseguibile firmato Microsoft, dall'app Windows, sfruttando un hook personalizzato per consentire l'accesso al processo LSASS. root@kitploit:...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge Questo progetto è un 'ponte' tra il linguaggio Sleep e Python. Consente il controllo di un teamserver di Cobalt Strike tramite Python senza la necessità del client GUI standard. NOTA: questo progetto è molto in BETA. L'obiettivo è fornire un parco giochi per i te...

PANIX

PANIX - Persistência Contra NIX O PANIX é um framework de persistência Linux poderoso, modular e altamente personalizável, projetado para pesquisadores de segurança, engenheiros de detecção, testadores de penetração, entusiastas de CTF e muito mais. Construído com versatilidade em mente, o PANIX...

SUSE CVE-2024-29180

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

Security Bulletin: Security Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-41248)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability in Spring Security Vulnerability Details CVEID:CVE-2025-41248 DESCRIPTION: The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type...

SUSE CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

SUSE CVE-2026-72138

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

pyFlipper

PyFlipper Wrapper CLI Python per Flipper Zero Articoli Come hackerare un ristorante Funzioni e caratteristiche: Wrapper CLI seriale per Flipper Interfaccia client Websocket Interfaccia TCP semplice Novità compatibilità firmware 1.x Questa release allinea il wrapper alla CLI corrente di Flipper Ze...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

dncil

dncil è una libreria di disassemblaggio del Common Intermediate Language CIL scritta in Python che supporta l'analisi dell'header, delle istruzioni e dei gestori di eccezioni dei metodi gestiti .NET. I dati analizzati vengono esposti tramite un'API orientata agli oggetti per aiutarti a sviluppare...

DEBIAN-CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

UBUNTU-CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

PT-2026-83128

file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...

PT-2026-82893

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus atk0110 Check package count before accessing element atk ec present walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; ...

EUVD-2026-67771

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

PT-2026-83006

In the Linux kernel, the following vulnerability has been resolved: can: softing: fw parse: validate firmware record spans fw parse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...