CVE-2026-57186

A flaw was found in Asterisk. The Q.931 party-number parser within the chanooh323 channel driver fails to properly validate incoming data. A remote, unauthenticated attacker can exploit this flaw by sending malformed Q.931 elements in an OOH323 request, causing the application to crash and...

SilentNimvest

SilentNimvest Basically, SilentNimvest is a SAM and Security Hives parser written in Nim. SilentNimvest reads keys under these hives by using the Silent Harvest technique. With this technique, rather than a SYSTEM-level privilege, a plain Administrator account who enables SeBackupPrivilege thanks...

SnafflerParser

Snaffler Output File Parser Especially in large environments, the Snaffler output gets very large and time-consuming to analyze. This script parses the Snaffler output file TSV format required and: Beautifies results into readable tables and exports to TXT, CSV, HTML, JSON or PS Gridview. Generat...

tabi

Advanced example This example demonstrates how to use the tabi module in order to detect all possible BGP hijacks seen from a BGP collector. Requirements WARNING : Before trying this example make sure you have at least 2GB of free memory on your computer The installation procedure is described in...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

Important: Red Hat Security Advisory: libXtst security update

An update for libXtst is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: libXtst security update

An update for libXtst is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser

A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...

pyMalleableC2

pyMalleableC2 A Python interpreter for Cobalt Strike Malleable C2 profiles that allows you to parse, modify, build them programmatically and validate syntax. Supports all of the Cobalt Strike Malleable C2 Profile grammar starting from Cobalt Strike version 4.3. It's not backwards compatible with...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

IAMActionHunter

Description IAMActionHunter is an IAM policy statement parser and query tool aims to simplify the process of collecting and understanding permission policy statements for users and roles in AWS Identity and Access Management IAM. Although its functionality is straightforward, this tool was...

sigmalite

github.com/runreveal/sigmalite Package sigmalite provides a parser and an execution engine for the Sigma detection format. rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection if err != nil return e...

libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser

A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...

Important: Red Hat Security Advisory: libXtst security update

An update for libXtst is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

apk-info

Fast, malware-robust parser for Android apk/xapk/apkm/apks files. Documentation: https://delvinru.github.io/apk-info/ $ apk-info show apkstest.apk Package Name: io.github.delvinru.apkstest Main Activity: io.github.delvinru.apkstest/.MainActivity Min SDK Version: 21 Max SDK Version: - Target SDK...

libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser

A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...

Important: Red Hat Security Advisory: libXtst security update

An update for libXtst is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Grafiki

Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...

bmc-tools

BMC-Tools RDP Bitmap Cache parser. Input bmc-tools processes bcache.bmc and cache????.bin files found inside Windows user profiles. Usage ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH With the following arguments meaning: -h, --help show this help message and exit -s SRC, --src SRC...

ADExplorerSnapshot

ADExplorerSnapshot.py ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound via BOFHound, and also supports full-object dumping to NDJSON. AD Explorer allows you to connect to a DC and browse LDAP data. It can also create snapshots of the server you are...