zig-pe

zig-pe Chargeur PE réflexif écrit en Zig. Charge et exécute des fichiers PE natifs et .NET directement depuis la mémoire. Fonctionnalités Pipeline de chargement PE Analyse des en-têtes DOS et NT PE32 et PE32+ à l'exécution Mappage des sections dans la mémoire allouée Résolution des importations p...

Pesidious

डीप रीइन्फोर्समेंट लर्निंग और GANs का उपयोग करके मैलवेयर म्यूटेशन इस उपकरण का उद्देश्य AI-संचालित क्लासिफ़ायर को बायपास करने के लिए मैलवेयर केवल PE32 नमूने को कृत्रिम बुद्धिमत्ता का उपयोग करके म्यूटेट करना है, जबकि इसकी कार्यक्षमता बरकरार रखी जाती है। अतीत में, इस क्षेत्र में उल्लेखनीय कार्य किया...

CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 & CVE-2026-47291 إثبات المفهوم لـ HTTP.sys ثغرة رفض الخدمة في HTTP.sys ثغرة تنفيذ التعليمات البرمجية عن بُعد في HTTP.sys نظرًا لقيود حجم الملفات على GitHub، يتم استضافة فيديوهات العرض التوضيحي لهذا الـ PoC CVE-2026-49160 كمرفقات في الإصدارات. CVE-2026-47291 الكود المعرض للثغرة: if...

CVE-2020-8289

CVE-2020-8289 – تنفيذ التعليمات البرمجية عن بُعد بصلاحيات SYSTEM/root عبر Backblaze ملخص الاسم: تنفيذ التعليمات البرمجية عن بُعد بصلاحيات SYSTEM/root عبر Backblaze CVE: CVE-2020-8289 المكتشف: Jason Geffner البائع: Backblaze المنتج: Backblaze لنظام Windows و Backblaze لنظام macOS الخطر: حرج تاريخ...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

moonwalk

moonwalk غطِّ آثارك أثناء اختبار الاختراق / استغلال أنظمة لينكس بترك صفر أثر على سجلات النظام وأوقات الملفات. 📖 فهرس المحتويات مقدمة الميزات التثبيت الاستخدام المساهمة الترخيص ℹ️ مقدمة moonwalk هو ملف تنفيذي أحادي بحجم 400 كيلوبايت يمكنه مسح آثارك أثناء اختبار الاختراق على جهاز يونكس. يحفظ حالة...

CVE-2026-42055

cve-id ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في البيئات الآمنة والمصرّح بها مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار الاختراق المصرّح بها إعداد مثال: git clone cd Project use python follow below Create a virtual environment python -m venv venv...

CVE-2026-93775 Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-93775 Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2026-96110

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-93775

The Podlove Podcast Publisher plugin for WordPress (versions up to and including 4.5.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping during the processing of the Auphonic webhook endpoint. An unauthenticated attacker c...

CVE-2026-93775 Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-96682 Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <presto-player> Tag

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2026-96106

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-96682

The Presto Player plugin for WordPress (versions up to and including 4.5.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the comment content via the tag. An unauthenticated attacker can inject arbitrary web scr...

CVE-2026-96682 Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <presto-player> Tag

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-104899 GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...

CVE-2026-104899 GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...

EUVD-2026-96104

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...

CVE-2026-104899

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress (versions up to and including 2.8.187 ) are vulnerable to Local File Inclusion (LFI) . The root cause is an insecure handling of the 'design_type' parameter , which allows unauthenticated attack...