jwt-reauth

JWT Re-auth यह Burp प्लगइन एक "auth" URL से प्रमाणीकरण टोकन कैश करता है, और फिर उन्हें एक निश्चित scope पर जाने वाले सभी अनुरोधों में हेडर के रूप में जोड़ देता है। विशेषताएँ प्लगइन विभिन्न मेनू में उपलब्ध कॉन्टेक्स्ट मेनू के माध्यम से सेटिंग्स को भेजने की अनुमति देता है। इसमें नए प्रमाणीकरण टोकन...

CVE-2026-57170

A flaw was found in compliance-trestle. The custom Jinja2 include tags, mdsectioninclude and mdcleaninclude, incorrectly re-parse the content of included Markdown files as Jinja2 template code in a non-sandboxed environment. This vulnerability, known as Server-Side Template Injection SSTI, allows...

f_hid-4.14-backports

Backports de fhid para Linux 4.14.190 SM-A525F Três correções para drivers/usb/gadget/function/fhid.c, aplicadas manualmente a um kernel Android de fornecedor 4.14.190 e verificadas no dispositivo em que rodam. 4.14 está em fim de vida. Não existe backport estável para nenhuma destas correções, e...

CVE-2026-41651

CVE-2026-41651 — PackageKit TOCTOU स्थानीय विशेषाधिकार वृद्धि वर्गीकरण: पर्पल टीम मूल्यांकन आर्टिफैक्ट केवल अधिकृत उपयोग के लिए। यह दस्तावेज़ और साथ में दी गई परीक्षण स्क्रिप्ट केवल उन प्रणालियों पर आंतरिक सुरक्षा सत्यापन के लिए हैं जहाँ लिखित प्राधिकरण प्राप्त किया गया है। शोषण का प्रमाण विषय-सू...

usbsnoop

usbsnoop — Live-USB-Transfer-Sniffer mit zwei fentry-Hooks Ein Echtzeit-, farbcodierter Feed von USB-Verkehr systemweit — aufgebaut auf den zwei universellen URB-Engpässen, durch die jeder Host-Controller-Treiber leitet, sodass er auf xHCI/EHCI/OHCI/dwc gleichermaßen funktioniert, ohne...

cerberus-re-skill

Cerberus RE cerberus-re è un workbench locale per il reverse engineering incentrato su Apple, progettato per costruire un ciclo ripetibile a tre teste statico/dinamico/strumentazione attorno a Ghidra, LLDB e Frida. È pensato per analisti e agenti di codifica che necessitano di artefatti durevoli...

CVE-2023-36146

CVE-2023-36146 PoC di CVE-2023-36146 - Multilaser RE 170 Firmware 2.2.6733 Cross Site Scripting persistente autenticato Passaggi per riprodurre: 1. Accedi al dispositivo tramite il tuo browser web 2. Vai su Security IP Filtering 3. Nel campo "Description" inietta il payload "" 4. Fai clic su Add ...

no-gdid

no-gdid Leggi, comprendi e metti a tacere l'identificatore globale del dispositivo Windows GDID — l'ID dispositivo nascosto legato all'account che ha aiutato l'FBI a localizzare un sospettato che usava una VPN. ⚠️ Disclaimer onesto fin dall'inizio: questo strumento non cancella il tuo GDID e non t...

auto-re-agent

re-agent Agente autonomo di reverse engineering — loop reverser/checker con consapevolezza del sorgente, verificatore obiettivo, motore di parità e backend Ghidra. Panoramica Demo: YouTube re-agent automatizza un flusso di lavoro di reverse engineering combinando un loop reverser/checker con la...

POC-CVE-2018-0114

CVE-2018-0114 POC Una vulnerabilità nella libreria open source Cisco node-jose precedente alla versione 0.11.0 potrebbe consentire a un attaccante remoto non autenticato di firmare nuovamente i token utilizzando una chiave incorporata nel token. La vulnerabilità è dovuta al fatto che node-jose...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098907 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098809 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4fillsuper Th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098899 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757

Compliance-trestle (Trestle) , a Python SDK and CLI for managing OSCAL compliance documents, is vulnerable to server-side template injection (SSTI) leading to remote code execution . The root cause is that the MDCleanInclude and MDSectionInclude Jinja2 tags re-parse untrusted Markdown content as ...

Cisco-ASA-vulnerability-research

LINAFULLRE — Reverse engineering a copertura completa di lina Creato: 2026-08-12 Target: labasav9-12-4-67/lina ASAv 9.12467, ELF x86-64, PIE; base immagine Ghidra 0x100000; 112.687 funzioni , 167 MB mappati, 642.707 simboli Obiettivo del track: copertura RE sistematica e completa del binario lina...

EUVD-2026-65330

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

LLM4Decompile

📊 Risultati | 🤗 Modelli | 🚀 Avvio rapido | 📚 HumanEval-Decompile | 📎 Citazione | 📝 Paper | 🖥️ Colab | ▶️ YouTube Reverse Engineering: decompilazione del codice binario con Large Language Models Updates 2025-10-04: Rilasciato SK²Decompile: decompilazione binaria in due fasi basata su LLM, dallo...