ida-pro-mcp

IDA Pro MCP !IMPORTANT I recommend using theOfficial Hex-Rays IDA MCP Server instead! See the announcement blog post for more information. Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt...

cpanel_xss_2023

ツールについて ⚒️ cpanelxss2023 は、cPanel における CVE-2023-29489 の脆弱性とその悪用可能性を検出するために設計されたシンプルな Python スクリプトです。 機能 ⚙️ CVE-2023-29489 スキャン: CVE-2023-29489 の脆弱性と悪用の特定・スキャンを行います。 URL 入力: 単一の URL スキャン、またはファイルからの複数 URL 読み込みをサポートします。 出力ログ: スキャン結果を出力ファイルに書き込むことができます。 Telegram 通知: スキャン結果の Telegram 通知を作成するオプション。 前提条件...

SBOM-VEX-Taint-Analysis

SBOM → VEX Agent OWASP GenAI セキュリティプロジェクトのガイドラインに準拠して構築されたセキュアなマルチエージェント AI パイプラインを使用し、SBOM から署名付き CycloneDX VEX ドキュメントを自動生成します。 問題 SBOM を生成すると、数百もの CVE が浮上します。実際には、その 90% 以上が特定の製品のランタイムコンテキストでは悪用不可能です。脆弱性悪用可能性交換（VEX）ドキュメントがなければ、Dependency-Track、リリースゲート、調達チェックリストなど、下流のすべてのツールが誤検知に埋もれてしまいます。...

beebug

beebug - エクスプロイト可能性を確認するツール 説明 beebug は、プログラムのクラッシュがエクスプロイト可能かどうかを検証するために使用できるツールです。 このツールは、バルセロナで開催された r2con 2018 で初めて発表されました。 実装されている機能は以下のとおりです: libc 上のスタックオーバーフロー プログラムカウンタのクラッシュ 分岐先のクラッシュ メモリ書き込みのクラッシュ ヒープの脆弱性 読み取りアクセス違反（一部エクスプロイト可能なケース） functracehttps://github.com/invictus1306/functrace...

Mage AI - Insecure Default Authentication Setup

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

log4j2-rce-recap

log4j2 のリモートコード実行 CVE-2021-44228 の簡単なまとめ 必要条件 maven = 3 java = 8 127.0.0.1:1389 で ldap が実行されていないこと 使用方法 maven でビルドします。 mvn test surefire プラグインは2回実行されます： ExploitabilityTest はバグの悪用可能性を証明します。 MitigationTest は VM プロパティ -Dlog4j2.formatMsgNoLookups=true を指定して実行され、緩和策の有効性を証明します。 要するに log4j と log4j2 log4...

test-cve-2016-1000027

test-cve-2016-1000027 CVEの悪用可能性の検証...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE starting from 11.9 does not properly validate image files that were passed to a file parser, resulting in a remote command execution vulnerability. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for...

CVE-2026-96552 sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssmpro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manipulation leads to one-way hash without...

CVE-2026-83413

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79845

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an out-of-bounds write operation through a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

CVE-2026-90505

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is...

EUVD-2026-76736

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455

This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...