apkstudio

APK Studio IDE open-source, multiplateforme basé sur Qt6 pour le rétro-ingénierie des paquets d'applications Android. Il propose une mise en page conviviale de type IDE incluant un éditeur de code avec prise en charge de la coloration syntaxique pour les fichiers de code .smali. Fonctionnalités...

Halcyon-IDE

Halcyon IDE الوصف هالسيون IDE هو أول بيئة تطوير متكاملة مطورة حصريًا لمطوري نصوص Nmap. بدأ هذا المشروع في البداية كمشروع جانبي في مقهى. الفكرة الأصلية كانت توفير واجهة تطوير أسهل لمجتمع أمن المعلومات العاملين على تطوير نصوص Nmap. تم تطوير المشروع في البداية للاستخدام الشخصي، ثم تم إصداره مفتوح...

SASM

SASM SimpleASM - un environnement de développement multiplateforme simple pour les langages assembleur NASM, MASM, GAS, FASM avec coloration syntaxique et débogueur. Avec SASM, vous pouvez facilement développer et exécuter des programmes écrits en NASM, MASM, GAS, FASM. Saisissez le code dans le...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

Vba2Graph

Vba2Graph أداة لباحثي الأمن السيبراني، الذين يضيعون وقتهم في تحليل ماكرو أوفيس الضار. يقوم بتوليد رسم بياني لاستدعاءات VBA، مع إبراز الكلمات المفتاحية الضارة المحتملة. يسمح بالتحليل السريع لوحدات الماكرو الضارة، والفهم السهل لسير التنفيذ. @MalwareCantFly الميزات تظليل الكلمات المفتاحية دعم خصائص...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

Elasticsearch 8.19.x < 8.19.20 / 9.3.x / 9.4.x < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-120)

The version of Elasticsearch installed on the remote host is 8.19.x prior to 8.19.20, or 9.3.x or 9.4.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-120 advisory. - Elasticsearch does not enforce an upper bound on a...

CVE-2026-72639

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

EUVD-2026-58285

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

CVE-2026-72639 Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

CVE-2026-72639

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

CVE-2026-72639

Summary: CVE-2026-72639 affects Elasticsearch highlighting handling of a user-supplied count, where there is no upper bound on the count and the resulting allocation is not bounded by a circuit breaker. An authenticated user with read privileges on a single index can trigger a single, small query...

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-120)

Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit...

PT-2026-71757

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

EUVD-2026-55993

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

CVE-2026-73161

CVE-2026-73161 affects certain versions of cti-transmute where the highlight() function mishandled conversion-table values passed to the search highlighting feature. The original implementation could return raw text when no query was supplied or perform a regex replace that inserted tags without...

CVE-2026-12108

The Highlighting Code Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...