sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2026-9198_exploit

CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...

-LogicSentry-AI

LogicSentry AI LogicSentry AI is a deterministic, offline application security triage engine designed to run entirely inside your local runtime environment. It combines static application security testing SAST and dynamic application security testing DAST to isolate critical business logic...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

Adobe Connect Privilege Escalation

The software vulnerability for Adobe Connect web conferences is related to flaws in the authorization process. Exploiting this vulnerability could allow a remote attacker to escalate their privileges...

Adobe Connect Privilege Escalation

The software vulnerability for Adobe Connect web conferences is related to flaws in the authorization process. Exploiting this vulnerability could allow a remote attacker to escalate their privileges...

Adobe Connect Privilege Escalation

The software vulnerability for Adobe Connect web conferences is related to flaws in the authorization process. Exploiting this vulnerability could allow a remote attacker to escalate their privileges...

IBM Aspera Faspex Privilege Escalation

The vulnerability in the IBM Aspera Faspex file transfer application is related to flaws in its authorization process. Exploitation of this vulnerability could enable a remote attacker to bypass existing security mechanisms and escalate their privileges...

PhpSpreadsheet SSRF

The vulnerability in the Worksheet\Drawing::setPath function within the src/PhpSpreadsheet/Worksheet/Drawing.php file of the PhpSpreadsheet library is related to authorization process flaws. Exploitation of this vulnerability could enable a remote attacker to carry out an SSRF attack...

Juniper Networks RPD DoS

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved stems from memory management flaws. Exploitation of this vulnerability enables a remote attacker to cause a denial of service...

Adobe Campaign Classic Authorization Code Execution

The software platform for running Adobe Campaign Classic marketing campaigns is vulnerable due to flaws in its authorization process. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

A week in security (October 26 – November 1)

Last week on Malwarebytes Labs: Fake PDF and search tools hijacked searches for 13.4 million Chrome users Photo ID, bank checks, face scan? The UK’s age-check options Binance hit by largest-ever crypto theft, with $6.3 billion stolen Hackers steal and publish data on 41,000 Homeland Security...

Elastic Security Kibana Unauthorized Access

The vulnerability in the Elastic Security feature of the Kibana data visualization service is related to authorization flaws. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by access control flaws. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Oracle MySQL Server DoS

Vulnerability in the Server component: The partition of the Oracle MySQL Server database management system is affected by access control flaws. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

MySQL InnoDB DoS

The vulnerability in the InnoDB component of the Oracle MySQL Server database management system is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...