16152 matches found
ll-34
ll/34 ll/34 is a circuit-level emulator for the PDP-11/34A 1976, running a virtual CPU reverse-engineered from the schematics, microcode, and logic captures of an actual PDP-11/34A. It was originally designed as a digital replica of the real CPU to assist with troubleshooting at the signal level...
CVE-2026-90934
EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...
psc
psc psc ps container is a fast process scanner that uses eBPF iterators and Google CEL to query system state with precision and full container context. Why psc? Fast Kernel-Level Access with eBPF Iterators psc uses eBPF iterators to read process and file descriptor information directly from kerne...
cmdchamp
cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...
RecoverPy
RecoverPy Scan raw partitions and recover data by inspecting disk blocks directly. 🎬 Demo 🔎 Overview When a file is deleted, its metadata disappears first. The underlying disk blocks often remain intact until they are reused. RecoverPy scans raw partition data directly and searches for byte...
CVE-2026-20841
CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...
ARTist
ARTist - The Android Runtime instrumentation and security toolkit ARTist is a flexible open source instrumentation framework for Android's apps and Java middleware. It is based on the Android Runtime’s ART compiler and modifies code during on-device compilation. In contrast to existing...
minimal
Small, hardened container images, free and MIT-licensed. Built from source with Chainguard's apko and Wolfi packages, rebuilt every six hours. Every image is cosign-signed, ships an SPDX SBOM attestation, and carries SLSA Level 3 build provenance. You can verify all of it without an account. 🌐...
hal
Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...
siper
Siper Shield Siper is a high-performance, XDP-based IP blacklist firewall built with Go and C eBPF. It allows you to drop malicious traffic at the earliest possible stage in the Linux networking stack—the network driver level. By leveraging XDP Express Data Path, Siper processes packets before th...
pgbackrest
pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.59.1 is the current stable release. Release notes are on the Releases page. Please give ...
CVE-2026-85195
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...
imago-forensics
imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...
qiling
Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...
Binvariants
Binvariants: Register-Level Invaraint-Guided Fuzzing for Binaries This repository provides the source code for Binvariants : a prototype fuzzing framework that leverages register-level likely invariant violations for fuzzing binaries. This work is presented in our paper Binvariants: Enhancing...
subdomain3
Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...
SYNwall
SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...
WordPress Core <6.5.2 - Cross-Site Scripting
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...
Meta Box <= 5.11.1 - Arbitrary File Deletion
The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxdeletefile function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server. id: CVE-2026-3946...