packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

zipbrk

zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...

CLSA-2026-1793695934 TuxCare security update for django (6 CVEs)

TuxCare rebuilt django to address 6 CVEs. Fixed in 4.0.post27+tuxcare...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...

CLSA-2026-1793627408 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.15-tuxcare.6...

CLSA-2026-1793620066 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 6.0.14-tuxcare.3...

CLSA-2026-1793611298 TuxCare security update for django (6 CVEs)

TuxCare rebuilt django to address 6 CVEs. Fixed in 4.0.post26+tuxcare...

CLSA-2026-1793609074 TuxCare security update for django (7 CVEs)

TuxCare rebuilt django to address 7 CVEs. Fixed in 5.1.10.post8+tuxcare...

CLSA-2026-1793541713 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.6-tuxcare.2...

CLSA-2026-1793522050 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.7.3-tuxcare.3...

CLSA-2026-1793521151 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 13 CVEs. Fixed in 2.9.9-tuxcare.2...

CLSA-2026-1793521072 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.7.9.3-tuxcare.3...

APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

CLSA-2026-1793520421 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.1-tuxcare.4...

CVE-2022-RCE

CVE-2022-XXXX Reverse junk data injection CVE subscription tools exploitation tutorials Exploit POC RCE LOG4j deserialization JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...