31455 matches found
deobf-Arxan-Deob-C
Arxan-Deob-C Simple C program to quickly deobfuscate windows executables protected with Arxan. It's a little messy at the moment... Be warned : I will be cleaning it up...
CVE-2019-9193byVulHub
CVE-2019-9193byVulHub PostgreSQL Arbitrary Command Execution with Admin Privileges CVE-2019-9193 Description PostgreSQL is a powerful open-source relational database management system. A vulnerability present in versions 9.3 through 11 allows administrators or users with COPY TO/FROM PROGRAM...
flare-qdb
FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...
CVE-2026-14382
CVE-2026-14382 Bin trigger Bug fix $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 The root cause of this vulnerability appears to be similar to that of CVE-2025-6558. Based on my current analysis, I suspect that it ma...
CVE-2021-31630
CVE-2021-31630 Modified the PoC CVE-2021-31630 script by Fellipe Oliveira for HTB Usage 'Example usage: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"'...
CVE-2026-20841
The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...
oss-bounty-program
ProjectDiscovery OSS Bounty Program Update: OSS Bounty Program Closed The ProjectDiscovery OSS Bounty Program is currently closed. We launched the program to reward meaningful open-source contributions, but over time we saw a growing volume of low-quality and heavily AI-generated submissions that...
3007Project
3007Project setuid program used to update player's score. Read score file content, search and update score base on given player ID, if no player ID is found, then new ID and score is added to file. Program should not crash unexpectedly and should exit gracefully with errors handled. Check for...
EUVD-2026-114382
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...
CLEANSTART-2024-MS76796 website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL
Security vulnerability affects the firefox-esr package. A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL...
CLEANSTART-2024-UJ00515 website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL
Security vulnerability affects the firefox-esr package. A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL...
CVE-2026-119287
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...
CVE-2026-119287
The Zuke build automation system for Deno (versions prior to 1.51.0 ) contains a vulnerability in the @zuke/core MCP registry mode. The system fails to apply the ZUKE_REGISTRY_LAUNCH_HOSTS authorization when processing command-form registry descriptors. If a run-capable caller invokes a tool from...
CVE-2026-119287
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...
PT-2026-134153
Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.19 Description An ordinary database user can execute operating system commands on the host machine running pgAdmin 4 as the account running the application. This occurs through the Import/Export Data tool, which...
CVE-2026-119287: zuke-build zuke: Zuke is a code-first, strongly typed build automation system for Deno
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...
Wordfence Bug Bounty Program Monthly Report – July 2026
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
qsynth-artifacts
QSynth Synthesis Artefacts Datasets These artifacts provide the following four datasets: syntia : 500 functions obfuscated with EncodeArithmetic and EncodeData customEA : 500 functions obfuscated with EncodeArithmetic customVREA : 500 functions obfuscated with Virtualize and EncodeArithmetic...
CVE-2026-98966
A flaw was found in the Linux kernel's network bonding driver. This vulnerability can lead to a Denial of Service DoS caused by kernel memory exhaustion when updating network filters. Because the driver fails to release the reference to an existing eXpress Data Path XDP program when a new program...