9487 matches found
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
kong
Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...
www-project-top-10-for-large-language-model-applications
www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications Welcome to the official repository for the OWASP Top 10 for Large Language Model Applications! About This Repository This repository contains the OWASP Top 1...
CVE-2026-119051
A flaw was found in flat. A remote attacker could trigger a Denial of Service DoS by submitting specially crafted input containing excessively large numeric keys to the unflatten function. This causes the library to allocate massive sparse arrays, exhausting system resources and blocking the...
JoySafety
JoySafety β Large Model Security Framework π Table of Contents Project Introduction β¨ Features π Quick Start π User Guide π Best Practices ποΈ Architecture Design π οΈ Development π License π Roadmap Star History new release β Prompt injection detection model fully upgraded : Training system...
skyhook
Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...
Awesome-LLM4Cybersecurity
When LLMs Meet Cybersecurity: A Systematic Literature Review π Explore 756+ Papers Across 11 Research Categories π RQ1: Domain LLMs | π― RQ2: Applications | π€ RQ3: Future Directions Updates π2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. π2026-02-09 We...
lava
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...
Agentic-SOC-Simulation
π‘οΈ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense π¨π³ δΈζζζ‘£ Chinese Version This project is a cutting-edge...
altdns
Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...
filecoin-pin: Unbounded DAG pinning can exhaust server resources
Summary The IPFS Pinning Service API implementation accepts a caller-controlled CID through POST /pins, queues background processing, and then recursively fetches the full DAG with helia.pins.addcid. The route and background pinning path do not enforce a request rate limit, per-user quota, maximu...
httpdoom
HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...
scannerl
Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...
interrogation-game
Interrogation A voice-based detective interrogation game. You're a detective. Mistral is a suspect who's lying. Your job is to catch the lie through questioning alone. Every case is procedurally generated β a unique white-collar crime, suspect, cover story, and one hidden lie. The suspect is play...
CVE-2026-114425
SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...
EUVD-2026-116782
SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...
CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion
SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...
CVE-2026-114425
SEPPmail Secure Email Gateway versions prior to 15.1.1 are vulnerable to an arbitrary file path traversal issue. The software trusts file paths provided in externally submitted Large File Transfer (LFT) attachment metadata. An unauthenticated remote sender can exploit this to cause the mail-proce...
PT-2026-136901
Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.1.1 Description An issue exists where the system trusts a file path provided in externally supplied Large File Transfer LFT attachment metadata. An unauthenticated remote sender can exploit th...
CVE-2026-120057
psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...