LibAFL

LibAFL, फजर लाइब्रेरी उन्नत फजिंग लाइब्रेरी - अपने स्वयं के फजर्स को एक साथ जोड़ें और Rust का उपयोग करके उनकी सुविधाओं का विस्तार करें। LibAFL Rust में लिखे गए फजर्स के पुन: प्रयोज्य टुकड़ों का एक संग्रह है, यह आपको एक तैयार फजर के कई लाभ देता है, जबकि पूरी तरह से अनुकूलन योग्य है। वर्तमान में कु...

chipsec

CHIPSEC: प्लेटफॉर्म सुरक्षा मूल्यांकन ढांचा CHIPSEC एक ढांचा है जो PC प्लेटफॉर्मों की सुरक्षा का विश्लेषण करने के लिए है, जिसमें हार्डवेयर, सिस्टम फर्मवेयर BIOS/UEFI, और प्लेटफॉर्म घटक शामिल हैं। इसमें एक सुरक्षा परीक्षण सूट, विभिन्न निम्न-स्तरीय इंटरफेस तक पहुँचने के उपकरण, और फोरेंसिक क्षमताएँ...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ è un plug-in per GDB e LLDB che rende il debugging meno doloroso, con un focus sulle funzionalità necessarie a sviluppatori di software di basso livello, hacker hardware, reverse engineer e sviluppatori di exploit. Ha un'infinità di funzionalità, consulta la nostra...

impacket

Impacket Copyright Fortra, LLC e società affiliate. Tutti i diritti riservati. Impacket è stato originariamente creato da SecureAuth, e ora è mantenuto da Core Security di Fortra. Impacket è una raccolta di classi Python per lavorare con protocolli di rete. Impacket è focalizzato sul fornire...

EVENSTAR

EVENSTAR Intel 64/Windows esperimenti di basso livello...

CVE-2025-0054

CVE-2025-0054 – SAP NetWeaver Gespeicherter XSS Scanner 🕷 Ein leichtgewichtiges Python-Tool zur Erkennung von gespeicherten Cross-Site-Scripting XSS-Schwachstellen in SAP NetWeaver Application Server Java , speziell ausgerichtet auf CVE-2025-0054. ⚠️ Nur für Bildungszwecke und autorisierte...

bashacks

bashacks Qu'est-ce que c'est ? bashacks est une collection de fonctions bash susceptibles d'être utiles aux programmeurs, aux analystes en sécurité et aux utilisateurs généraux qui ont besoin d'opérations de bas niveau. En fait, il n'y a rien de vraiment nouveau dans bashacks ; toutes les fonctio...

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

CVE-2026-70548

This SSRF vulnerability affects JFrog Artifactory (Self-Managed) through its External Dependency feature related to CocoaPods . Under specific circumstances, a low-privilege user can issue requests to remote CocoaPods repositories, potentially leveraging Artifactory as a proxy. The CVSS v3.1 scor...

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

[SECURITY] Fedora 43 Update: GitPython-3.1.55-1.fc43

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

UBUNTU-CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-67316 axios before 1.18.0 Prototype Pollution via bodyless methods

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

UBUNTU-CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15793 Git source checkout from a bundle file could lead to command injection

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

CVE-2026-15793 Git source checkout from a bundle file could lead to command injection

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...