242 matches found
Beaconator
Beaconator Beaconator is an aggressor script for Cobalt Strike used to generate either staged or stageless shellcode and packing the generated shellcode using your tool of choice. Currently, it supports the following tools: Staged Beacon Generator Alaris Stageless Beacon Generator PEzor ScareCrow...
NimSyscallPacker
NimSyscallPacker / Loader This tool was made public after a talk at x33fcon. It was my private main coding project from 2021 - 2024 and is now considered deprecated and is not maintained anymore. Dont expect bug fixes or feature updates here from my side. Instead, RustPack is maintained now as a...
Windows-PE-Packer
Windows PE Packer Languages English 简体中文 Introduction...
elfpack
ElfPack: ELF 바이너리 섹션 도킹을 통한 스테이지리스 페이로드 전달 주요 내용 페이로드 번들링 메커니즘 개요: 컴파일, 링킹 및 로딩 바이너리 호환성 및 전달 메커니즘에 대한 느슨하게 결합된 페이로드 생성 섹션의 자동 메모리 로딩 회피 구조화된 섹션 유형 사용 현장에서 ELF 섹션을 통한 로더에 페이로드 재부착. 자신의 페이로드 가져오기 분리된 사전 컴파일된 ELF 섹션을 사용한 서명 우회 페이로드 생성 파이프라인을 통한 로더에 드라이브 바이 페이로드 부착 팻 페이로드 바이너리 생성 및 바이너리 패커 회피 사례 복잡한...
batch_jailbreak
Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting の公式リポジトリ Kihyun Kim、 Hee-Seon Kim、 Wonjun Lee、 Changick Kim 韓国科学技術院 KAIST ニュース 2026.09 本論文が AACL-IJCNLP 2026 Main に採択されました！ 🎉 2026.08 論文が arXiv で公開されました！ 2026.08 コードを公開しました！ 概要...
CVE-2026-11899 PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the net: mscc: ocelot section, there was an issue where the IFH SRCPORT field in ocelotifhsetbasic was incorrectly set. Packets injected by the CPU should have the SRCPORT field equal to the CPU port module index in the Analyz...
CVE-2026-18027: Improper Limitation of a Pathname to a Restricted Directory
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...
SUSE-SU-2026:22929-1 Security update for perl
This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...
SUSE-SU-2026:22847-1 Security update for perl
This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...
CVE-2026-13116 PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...
EUVD-2026-43138
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...
CVE-2026-13116: Authorization Bypass Through User-Controlled Key
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...
PT-2026-57388
Name of the Vulnerable Software and Affected Versions PDF Invoices & Packing Slips for WooCommerce versions prior to 5.14.1 Description An Insecure Direct Object Reference IDOR exists in the generate document shortcode function due to missing validation on a user-controlled key. Authenticated...
WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Authenticated Contributor+ Sensitive Information Disclosure vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 5.14.0...
EUVD-2026-36936
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips 5.9.0 versions...
CVE-2026-49056
Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels = 4.9.4 versions...
CVE-2026-39472
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips 5.9.0 versions...
