1826 matches found
cve-2020-0618
CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...
sleuthkit
The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...
subparse
subparse Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in a searchable web-viewer. The framework is modular, making use of a core parsin...
mquery
mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...
reconerator
Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...
RastLeak
RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: pip install -r requirements.txt To install wget: sudo pip install wget Version The last stable version i...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
ache
ACHE Focused Crawler ACHE is a focused web crawler. It collects web pages that satisfy some specific criteria, e.g., pages that belong to a given domain or that contain a user-specified pattern. ACHE differs from generic crawlers in sense that it uses page classifiers to distinguish between...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...
CVE-2020-27368
CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability Description Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter. Additional Information Remediation disabling...
ROS-20261014-73-0166
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0232
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0208
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0206
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CLEANSTART-2026-TQ95555 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened
Security vulnerability affects the victoria-metrics package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...
Golang X Text Package Heap Buffer Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2026-46572
A flaw was found in ntfs-3g. This vulnerability allows a local attacker to achieve privilege escalation or cause a denial of service DoS by corrupting system memory. By providing a specially crafted NTFS filesystem image and creating a file within a malicious directory, an attacker can trigger a...
CVE-2026-107225
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...
CVE-2026-107225 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...
EUVD-2026-94556
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...