1807 matches found
CVE-2021-25461
CVE-2021-25461 Ceci est un dépôt contenant la Preuve de Concept pour la CVE découverte dans le cadre de l'article SAUSAGE Security Analysis of Unix domain Socket usAGE in Android qui a été accepté à EuroS&P 2022. J'ai travaillé sur cet article avec Mounir Elgharabawy, celui qui a découvert la...
p-invoke.net
p-invoke.net يحتوي هذا المستودع على معظم تعريفات P/Invoke من موقع pinvoke.net الذي يكون غير متصل في معظم الأوقات، مع إضافة رابط لتوثيق مايكروسوفت لكل تعريف. يتوفر Gitbook على الرابط https://ricardojoserf.gitbook.io/pinvoke. ملاحظات قمت بهذا للتحقق من بعض التعريفات بطريقة سريعة لأنني استخدمت...
Get-PDInvokeImports
Get-PDInvokeImports Description: Get-PDInvokeImports est un outil module PowerShell capable d'effectuer une détection automatique de l'utilisation de P/Invoke, Dynamic P/Invoke et D/Invoke dans un assembly. Il montre tous les emplacements à partir desquels ils sont référencés et exporte le tout...
EvilClippy
تم إصدار هذه الأداة خلال محاضرتنا في BlackHat Asia 28 مارس 2019. يتوفر تسجيل فيديو لهذه المحاضرة على https://www.youtube.com/watch?v=9ULzZA70Dzg. Evil Clippy مساعد عبر المنصات لإنشاء مستندات MS Office ضارة. يمكنه إخفاء وحدات ماكرو VBA، وتدمير كود VBA عبر P-Code وإرباك أدوات تحليل الماكرو. يعمل عل...
koppeling-p
koppeling-p Адаптивный перехват DLL / динамическое перенаправление экспорта — сохранение EAT Обзор Этот проект представляет собой ограниченное расширение только на Python для замечательного проекта Ника Лэндерса @monoxgas, доступного здесь. Отличия Единственное отличие от оригинального проекта...
ghostrings
Ghostrings Script per recuperare le definizioni di stringhe nei binari Go con analisi P-Code. Testato con x86, x86-64, ARM e ARM64. Script Golang Questi si trovano nella categoria Golang dello Script Manager. GoDynamicStrings.java Analizza il P-Code per trovare le strutture di stringa create sull...
hakuin
Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...
cve-2024-13176-timing-analysis
Rilevamento strumentato del leakage temporale ECDSA a bassa ampiezza in CVE-2024-13176 Questo repository contiene il report di ricerca, il sito web, i dati, il materiale sorgente e i file di riproducibilità per uno studio indipendente su CVE-2024-13176. Il progetto esamina se la condizione...
zyxel-p870hn-hardware-hacking
De uma PCB nua até root: hardware-hacking de um ZyXEL P-870HN via UART Duas fotos de celular de uma placa de roteador sem etiqueta → console serial → bypass de autenticação → shell root — reproduzindo a cadeia real, ainda sem patch, CVE-2025-0890 conta supervisor oculta + CVE-2024-40891 injeção d...
CVE-2026-20320
A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...
CVE-2026-20320
CVE-2026-20320 is an Out-of-Band Blind XML External Entity (XXE) Injection vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks . The root cause is that external entity resolution is allowed by default, enabling an unauthenticated, remote attacker to send a crafted XML ...
CVE-2026-20320
A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...
PT-2026-78521
A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...
Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD
A flaw was found in Eclipse OMR. The arraycmp SIMD Single Instruction, Multiple Data implementation for Z and P architectures does not properly validate input by failing to check if the number of bytes to compare is zero. This oversight could allow a remote attacker, with low privileges and user...
Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD
A flaw was found in Eclipse OMR. The arraycmp SIMD Single Instruction, Multiple Data implementation for Z and P architectures does not properly validate input by failing to check if the number of bytes to compare is zero. This oversight could allow a remote attacker, with low privileges and user...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fixed a deadlock that occurred when returning a delegation during the open function. Ben Coddington reported seeing a hang in the following stack trace: 0 ffffd0b50e1774e0 schedule at ffffffff9ca05415 1 ffffd0b50e177548...
CVE-2026-16243
A flaw was found in Eclipse OMR. The arraycmp SIMD Single Instruction, Multiple Data implementation for Z and P architectures does not properly validate input by failing to check if the number of bytes to compare is zero. This oversight could allow a remote attacker, with low privileges and user...
