frida-c2-mcp

FridaC2MCP Un server MCP con trasporto HTTP streamable che esegue la strumentazione dinamica di Frida interamente sul dispositivo — nessun tool lato client richiesto. Questo progetto gira direttamente su dispositivi Android rooted e iOS jailbroken , esponendo Frida come un insieme di strumenti...

AFL

american fuzzy lop Sviluppato originariamente da Michal Zalewski [email protected]. Vedi QuickStartGuide.txt se non hai tempo di leggere questo file. 1 Sfide del fuzzing guidato Il fuzzing è una delle strategie più potenti e collaudate per identificare problemi di sicurezza in software reali...

e9patch

E9Patch - Ein leistungsstarker statischer Binär-Rewriter E9Patch ist ein leistungsstarkes Tool zum statischen Binär-Rewriting für x8664 Linux-ELF-Binärdateien. E9Patch ist: Skalierbar : E9Patch kann große/komplexe Binärdateien zuverlässig umschreiben, darunter Webbrowser 100 MB Größe. Kompatibel ...

drmemory

Dr. Memory: il debugger della memoria Informazioni su Dr. Memory Dr. Memory è uno strumento di monitoraggio della memoria in grado di identificare errori di programmazione legati alla memoria come accessi a memoria non inizializzata, accessi a memoria non indirizzabile inclusi accessi al di fuori...

openrasp

OpenRASP Introduzione A differenza delle soluzioni di controllo perimetrale come il WAF, OpenRASP integra direttamente il suo motore di protezione nel server applicativo tramite strumentazione. Può monitorare vari eventi, incluse le query al database, le operazioni sui file e le richieste di rete...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098894 advisory. In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can...

frida-ui

Frida UI Eine moderne, leichtgewichtige, webbasierte Benutzeroberfläche für Frida, entwickelt für Android-Applikations-Penetrationstests. Sie ermöglicht die Interaktion mit Geräten, Prozessen und Skripten direkt aus dem Browser. Schnellstart root@kitploit: Installation mit uv empfohlen oder...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: Check for out-of-bounds chipid values. Clang with CONFIGUBSANSHIFT=y noticed a condition where a signed type e.g., the literal 1 is treated as an int might be shifted beyond 32 bits. As a result, instrumentation...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-wmi-sysman: Fixed the retrieval of WMI data blocks in sysfs callbacks. After retrieving WMI data blocks through sysfs callbacks, it is necessary to check the validity of these data blocks before dereferencing...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: conductor-fips, druid, nuxeo, zipkin, logstash, logstash-fips, thingsboard, conductor, cassandra-reaper...

GHSA-68MJ-5WR7-6FGG vulnerabilities

Vulnerabilities for packages: logstash, cassandra-reaper, zipkin, thingsboard, druid...

Denial-of-service (DoS)

Spring Cloud Sleuth is vulnerable to a Denial-of-service DoS. The vulnerability is due to specially crafted calls that can trigger a DoS condition when org.springframework.cloud:spring-cloud-sleuth-instrumentation is used with Spring TX instrumentation enabled, allowing an attacker to exploit the...

CVE-2026-62738

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

EUVD-2026-56772

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability

...

PT-2026-70499

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

GHSA-RWQX-FVQH-6WM4 OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

OpenTelemetry Java Instrumentation JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends...

EUVD-2026-41152

OpenTelemetry Javaagent RMI context propagation allows resource exhaustion...

GHSA-FQ3F-M5QM-99F5 OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

The RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of the strings read from the stream. An attacker who can reach an RMI endpoint on an instrumented JVM can send an oversized context propagation payload. This can cause excessive...

CVE-2026-63825

A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...