NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

WhacAMole

WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to malware and presenting and saving in files all the relevant information for verification, correlation or analysis, as well as dumping memory regions, processes and...

Hunt-Sleeping-Beacons

Hunt-Sleeping-Beacons This project is mostly a callstack scanner which tries to identify IOCs indicating an unpacked or injected C2 agent. All checks are based on the observation that C2 agents wait between their callbacks causing the beacons thread to idle and this tool aims to analyze what...

CVE-2026-123096

A flaw was found in anacrolix/torrent. A remote attacker controlling a malicious HTTP tracker can cause a Denial of Service DoS by returning excessively large or compressed responses to announce or scrape requests. Because the client buffers incoming HTTP responses without size restrictions,...

CVE-2026-100407

A flaw was found in Git's Windows credential helper. When storing credentials that contain both a password and an OAuth refresh token, an incorrect buffer calculation leads to an out-of-bounds memory write. This issue can cause a Denial of Service DoS by crashing the credential helper process, an...

ShellGhost

ShellGhost A memory-based evasion technique which makes shellcode invisible from process start to end. Motivation I wanted to share this shellcode self-injection POC to showcase some AV/EDR evasion concepts that may turn useful for Red Teaming. Just a few weeks ago I came up with a custom in-memo...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

CVE-2026-115567

A flaw was found in Tokio. A race condition between interval timer polling and the multi-threaded runtime driver can cause an internal timer entry to be dropped without proper synchronization while being processed. A local attacker could exploit this timing issue to trigger a use-after-free,...

CVE-2026-80874

A flaw was found in the Linux kernel. This vulnerability occurs when the system experiences high memory usage, potentially leading the kernel to improperly access and corrupt memory regions designated for the DBSC5 DRAM controller's inline Error-Correcting Code ECC operations. This unauthorized...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

CVE-2026-73473

A flaw exists in GStreamer gst-plugins-good (avidemux) where the subindex parser fails to validate the entry count. This oversight can lead to excessive memory allocation and a denial of service (DoS) . The vulnerability is triggered when opening or previewing a crafted AVI file, as avidemux is a...

EUVD-2026-117926

A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and denial of service. Because avidemux is auto-plugged by playbin, decodebin, and gst-discoverer, opening or previewing a crafted AVI is...

CVE-2026-103582

A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

CVE-2026-102485

A flaw was found in NTPsec. An out-of-bounds read vulnerability in the Motorola Oncore reference clock driver allows an attacker with control over the connected GPS receiver's serial data to crash the service, leading to a Denial of Service DoS, or potentially disclose sensitive memory. By...

CVE-2026-102484

A flaw was found in NTPsec. This vulnerability allows an attacker who controls a Telephone JJY time source to crash the daemon, resulting in a Denial of Service DoS, or cause memory corruption. The issue stems from a heap-based buffer overflow in the JJY reference clock driver when processing mor...

CVE-2026-118590

A flaw was found in nibabel. The header processing logic in the arrayfromfile function does not properly restrict memory allocation when handling input data. A remote attacker could exploit this vulnerability by submitting a specially crafted file to trigger excessive memory consumption, leading ...

CVE-2026-118488

A flaw was found in the Eclipse Vert.x Redis client. A malicious server can cause a Denial of Service DoS by sending unbounded data or malformed Redis Serialization Protocol RESP responses. Due to missing input size limits and improper parsing of incomplete response terminators, the client can...

CVE-2026-116188

A flaw was found in rclone's S3 service. A remote attacker can trigger a Denial of Service DoS by sending concurrent multipart upload requests with excessively large lengths. This causes an integer overflow in the memory-accounting mechanism, bypassing configured buffer limits and retaining...

CVE-2026-115942

A flaw was found in Apache Qpid Proton. When processing a misconfigured wildcard TLS Transport Layer Security certificate that does not comply with standard specifications, the application triggers an out-of-bounds read on the stack. A remote attacker could exploit this vulnerability by presentin...