f-for-java

f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...

B2R2

B2R2 B2R2 is a fully managed binary analysis framework written in F. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection. The name B2R2 takes inspiration from R2-D2, the iconic robot from Star Wars. Originally named B2-...

FMD Android

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

see

Sandboxed Execution Environment :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

Tylium

Tylium Primary data pipelines for intrusion detection, security analytics and threat hunting These files contain configuration for producing EDR endpoint detection and response data in addition to standard system logs. These configurations enable the production of these data streams using F/OSS...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...

F-Scrack

To prevent this script from being maliciously used, this project has been deleted...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd 认证绕过 CVE: CVE-2026-24061 严重性: 严重 Critical CVSS: 9.8 严重 CWE: CWE-88 — 命令中参数分隔符的不当中和 受影响组件: GNU Inetutils telnetd 受影响版本: 1.9.3 至 2.7 概述 CVE-2026-24061 是 GNU Inetutils 提供的 Telnet 服务器实现中的一个严重认证绕过漏洞。 该漏洞源于在启用 Telnet 自动登录功能时，对客户端控制的 USER 环境变量验证不足。恶意值可能被解释为系统 login...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

CVE-2024-25832-PoC

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload. Overview This repository features a Proof of Concept PoC for a two-step exploit chain targeting DataCube3 devices. It combines CVE-2024-25830 Improper Access Control to extract root passwords and...

FLAIR

F-Secure 轻量级事件响应取证采集工具（FLAIR） 本文档描述了 FLAIR 采集脚本的用途和基本操作。 用途 在调查客户环境中的安全事件时，有时客户环境中并未部署 EDR 解决方案，导致 IR 团队无法利用其在整个环境中收集取证工件。FLAIR 正是为了对目标主机上的若干关键工件执行半自动化采集而创建的。 FLAIR 填补了主机完整取证镜像所能提供的深层数据与 EDR 解决方案所提供的更具针对性和交互性的方法之间的空白。 设计 FLAIR 基于以下原则创建： 尽可能仅使用 Microsoft Windows 系统自带的工具，即仅使用操作系统“内置”的程序...

lazarus-sigma-rules

Lazarus Sigma 规则 本仓库中的 Sigma 规则由 F-Secure Countercept 检测与响应团队创建，旨在为 Lazarus 组织近期使用的工具、技术与程序提供检测覆盖。 关于这些 Sigma 规则创建过程的博客文章可在此处查看： https://labs.f-secure.com/blog/catching-lazarus-threat-intelligence-to-real-detection-logic...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

F-logic DataCube3 - SQL Injection

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

CVE-2026-42208_lab

LiteLLM Proxy SQL 注入（GHSA-r75f-5x8p-qvmc） 一个用于复现 LiteLLM Proxy API 密钥认证流程中 SQL 注入漏洞的环境。 漏洞摘要 项目| 详情 ---|--- 安全公告| GHSA-r75f-5x8p-qvmc 类型| SQL 注入（CWE-89） 严重程度| 严重 受影响版本| litellm =1.81.16, =1.83.7（提交 4dc416ee74） 攻击路径 注入发生在错误处理回调路径 中，而非主认证流程。当发送非 sk- 前缀的令牌时，断言失败，原始（未哈希）令牌会流经失败回调链，进入使用 f-string 插值的 S...

telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061：GNU inetutils-telnetd 身份验证绕过 一个用于演示 CVE-2026-24061 的 Docker 实验环境——这是 GNU inetutils telnetd 中的一个严重身份验证绕过漏洞，该漏洞在 11 年 内未得到修补。 漏洞详情 Telnetd 将 USER 环境变量直接传递给 /usr/bin/login，未进行任何清理。login 二进制文件有一个 -f 标志，用于跳过身份验证（专为已预认证的会话设计）。通过设置 USER='-f root'，攻击者可以诱骗 login 在无需密码的情况下授予 root 访问权限。 受影响版本...

AZL-99399 CVE-2026-80803 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...