CVE-2018-11788

Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output subgraph...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.4, next release will be 6.2.5. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

CVE-2025-63589

CVE-2025-63589 XSS Reflejado en el manejo de rutas de index.php de CMSimpleXH Descubierto: 6 de octubre de 2025 Productos: CMSimpleXH CMS de archivo plano de código abierto Versiones afectadas: 1.8 CVEs: CVE-2025-63589 Autenticación requerida: Ninguna sin autenticar Tipo de ataque: Cross-Site...

CVE-2021-31630

CVE-2021-31630 CVE encountered while hacking HTB machines; the exploit-db exploit had some errors, so here are manual exploitation methods and an exploit. Script Usage Command execution with no output python exp.py -u http://127.0.0.1:8080 -l openplc -p openplc -c "whoami" Manual Exploit The atta...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

One-Lin3r

One-Lin3r One-Lin3r es un framework simple, modular y ligero que te proporciona todos los one-liners que necesitarás durante pruebas de penetración sistemas Windows, Linux, macOS o incluso BSD o hacking en general, con muchas funciones nuevas para automatizar todo esto por completo por ejemplo, n...

PwnKit

PwnKit This repository contains an exploit I developed to understand how the Polkit Pkexec vulnerability works: CVE-2021-4034 Pkexec Local Privilege Escalation. Polkit formerly known as PolicyKit is a component that controls privileges on Unix-like operating systems. It provides an organized way...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

TinyInst

TinyInst Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

jsdeob-workbench

jsdeob-workbench Un banco de trabajo visual para desofuscar JavaScript. Construye cadenas de transformación, recórrelas paso a paso, escribe tus propios plugins. Demostración en YouTube https://www.youtube.com/watch?v=7zuqKoJT2BM https://www.youtube.com/watch?v=bOVnPIfjoco ¿Qué es esto? Esta...

RpcProxyInvoke

RpcProxyInvoke Overview To create a general way to execute local and remote code, we designed a relatively obscure method of code execution, which we internally refer to as RpcCraft Self and RpcExec Remote Process. This technique leverages a methodology well-known among exploit developers, abusin...

CVE-2026-84897 wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSHMSGKEXDHGEXGROUP 31 and SSHMSGKEXDHGEXREPLY 33 when a server receives them from an unauthenticated client. IsMessageAllowedServer applies no direction check to the key exchange...

CVE-2026-84897

The wolfSSH server (through version 1.5.0 ) is vulnerable to CPU exhaustion and key exchange role confusion because it improperly admits server-to-client Diffie-Hellman group exchange messages from unauthenticated clients. Due to a missing direction check in IsMessageAllowedServer(), the server m...

EUVD-2026-94165

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSHMSGKEXDHGEXGROUP 31 and SSHMSGKEXDHGEXREPLY 33 when a server receives them from an unauthenticated client. IsMessageAllowedServer applies no direction check to the key exchange...

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: $rc += system"$sblistpack '$uri' '$user'...

ThisSeemsWrong

Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...