credential-attacks-toolkit — Updated!

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

apkprobe

APKprobe Декомпилятор APK и сканер секретов для исследований безопасности Android. Автоматически извлекает API-ключи , эндпоинты , токены и другие утекшие учётные данные из Android-приложений. Работает с файлами .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab. Идеально подходит д...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in에는 쉽게 악용 가능하고, 인증이 필요 없으며, 네트워크를 통해 접근 가능한 취약점이 있어 HTTP를 통한 침해가 가능합니다. 영향을 받는 지원 버전은 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0입니다. CVSS 10.0 Oracle/NVD 기준이며 HTTP를...

cve-2026-29000

Эксплойт CVE-2026-29000 Обход аутентификации JWT в pac4j-jwt через JWE-обёрнутый PlainJWT Описание уязвимости CVE-2026-29000 — это критическая уязвимость обхода аутентификации, затрагивающая pac4j-jwt версий ниже 4.5.9, 5.7.9 и 6.3.3. Уязвимость позволяет удалённым злоумышленникам подделывать...

JObfuscator

JObfuscator — Java 소스 코드 난독화 및 보호 JObfuscator 는 Java 프로그래밍 언어용 소스 코드 난독화 도구입니다. 해킹, 크래킹, 리버스 엔지니어링, 디컴파일 및 기술 도용으로부터 Java 소스 코드와 알고리즘을 보호할 수 있습니다. JObfuscator는 다양한 난독화 기법을 사용하여 Java 소스 코드의 실제 기능을 보호하고 은닉합니다. 모든 변수와 메서드 이름을 변경하고, 코드 흐름을 비선형적으로 만들어 난독화하며, 최첨단 다형성 문자열 암호화 엔진으로 모든 문자열을 암호화합니다. 더 자세한 ...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology Неаутентифицированное удалённое выполнение кода через отладочную конечную точку dubboApi -critical TL;DR Weaver E-cology 10.0 до сборки 20260312 содержит критическую уязвимость неаутентифицированного удалённого выполнения кода в конечной точке...

CVE-2026-84380

A flaw was found in HTTPX2, a Python HTTP client. The Request.prepare function can incorrectly add a Content-Length header to a request that already includes a Transfer-Encoding header. This conflict in HTTP framing headers can lead to request smuggling or connection desynchronization. This could...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q 免解锁 Bootloader KernelSU Root CVE-2026-43499 临时 root → LDPRELOAD 通道绕过 DEFEX → 无 LTO clang-12 版 kernelsu.ko → su + KernelSU Manager 全功能 状态：✅ 2026-08-12 真机验证达成 （固件 F9360ZCSAIZF1，内核 5.10.236-android12-9-2755199-abF9360ZCSAIZF1） 本项目记录在 Bootloader 锁定 的三星设备上达成 KernelSU root...

CVE-2026-44402

CVE-2026-44402 Неаутентифицированное полное удалённое выполнение команд в Voltronic Power SNMP Web Pro 1.1 Содержание Затронутый производитель: https://voltronicpower.com/ Затронутый продукт: SNMP Web pro 1.1 SNMP Web Pro 1.1 содержит неаутентифицированную уязвимость удалённого выполнения кода в...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

CVE-2026-32710

CVE-2026-32710 Переполнение кучи вJSONSCHEMAVALID MariaDB → устойчивое повышение привилегий → RCE через UDF | ---|--- Затронуто| MariaDB 11.4.x подтверждено на 11.4.9 Ошибка| Запись за пределами буфера в jsongetnormalizedstring — strncpy в 128-байтовый DYNAMICSTRING без проверки границ Воздействи...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

CVE-2026-84380

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

DEBIAN-CVE-2026-84380

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

CVE-2026-16723

🚨 CVE-2026-16723 — fastjson 1.2.83: RCE через цепочку обнаружения ресурсов @JSONType Проект воспроизведения удалённой загрузки классов / выполнения команд для fastjson 1.2.66 1.2.83 через аннотацию@JSONType + недопустимое имя класса + протокол jar:. ⚠️ Отказ от ответственности Данный проект...

cve-2025-59489

Инструмент обнаружения уязвимости Unity CVE-2025-59489 Автоматизированный инструмент обнаружения уязвимости внедрения в Unity Runtime для Android-игровых платформ. Обзор уязвимости CVE ID : CVE-2025-59489 Оценка CVSS : 8.4 High Затронутые версии : Android-приложения, созданные с Unity 2017.1 и...

CVE-2026-31431-Advanced-Exploit

CVE-2026-31431 — Copy Fail Linux 커널 페이지 캐시 권한 초과 쓰기 취약점 AFALG AEAD 산란 리스트 체인 오류 개요 Linux 커널 algifaead 인터페이스에 존재하는 취약점으로, 권한 없는 사용자 가 임의의 읽기 가능한 파일 의 페이지 캐시page cache에 임의의 데이터를 쓸 수 있게 합니다 — 파일 권한 검사, 강제 접근 제어MAC, 무결성 검증을 완전히 우회합니다. 디스크의 파일 내용은 변경되지 않지만, 이후 해당 파일을 읽는 모든 프로세스SUID 프로그램, 동적 링커, execve...