pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...

pycrypt

pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: 1. Make Sure your payload file have all the...

SANS_THIR16

SANSTHIR16 SANS Hunting on the Cheap DGA Classifier RandomForest using domain features like voweltoconsonantratio, longestconsonantsequence, ngrams from dictionary and alexa top domains. ROC Curve...

A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models

Watermarking has emerged as a key tool for identifying text generated by large language models LLMs, with current schemes embedding statistical signals into the generation process to enable later detection. In this work, we identify a shared weakness across a broad class of popular LLM watermarki...

PT-2026-116897

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling ratio validation In ad4030 set avg frame len, the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2. Validate that...

Framework-DDOS-Attack-Very-advance-

Framework-DDOS-Attack-Very-advance- A — Real r...

diaphora

δiaphora Instalación Instalar con el gestor de plugins de Hex-Rays: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Instalación manual: descarga el código y colócalo en tu directorio plugins/. Diaphora διαφορά, griego para 'diferencia' versión 3.4 es la...

EUVD-2026-78647

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification...

CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Loads the TSC multiplier of L1 based on L1’s state, not L2’s state. When emulating a nested VM-Exit, the TSC multiplier of L1 is loaded if L1’s desired ratio does not match the current ratio. This does not occur if L1’...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update the logic to calculate the D value for RCG. The display pixel clock has a requirement on certain newer platforms to support M/N as 2/3, and the final D value calculated results in underflow errors. As...

Astra Linux – Vulnerability in libraw

Buffer overflow vulnerability in the LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

Linux Distros Unpatched Vulnerability : CVE-2026-46387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

tar: node-tar: Denial of Service via crafted gzip bomb

A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on t...

DEBIAN-CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

Data Amplification

Overview mysql2 is a mostly API compatible with mysqljs and supports majority of features. Affected versions of this package are vulnerable to Data Amplification in the handleCompressedPacket function of lib/compressedprotocol.js, which calls zlib.inflatebody, ... without a maxOutputLength option...

CVE-2026-78206

exceljs-hardened before 5.0.0 (and the upstream exceljs through 4.4.0) is vulnerable to uncontrolled resource consumption via unbounded xlsx decompression. The library decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. ...

PT-2026-79799

Name of the Vulnerable Software and Affected Versions exceljs-hardened versions prior to 5.0.0 Description The software decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. This allows attackers to upload highly compresse...

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes

Prompt injection is a critical security threat in large language model LLM applications, where attackers hijack model behavior by embedding malicious instructions in user or external data. Existing detection methods only detect the presence of injection and refuse to respond upon detection,...

CVE-2026-70378

imagecli's pipeline operation Carve::apply in src/imageops.rs only asserts , never validating that the ratio is positive. A negative ratio e.g. -5 causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to imageproc::seamcarving::shrinkwidth —...