theZoo

theZoo - A Live Malware Repository theZoo is a project created to make the possibility of malware analysis open and available to the public. Since we have found out that almost all versions of malware are very hard to come by in a way which will allow analysis, we have decided to gather all of th...

Security Bulletin:Vulnerabilities exists in zstd package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor,...

MalEval

MalEval Article: Is “Knowing It’s Malicious” Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing Article DOI: 10.1145/3832187 MalEval is a framework for evaluating Android malware behavior reports generated by large language models. The code in this repository implements two...

SteaLinG

SteaLinG v3.1 Description The SteaLinG is an open-source penetration testing framework designed for social engineering After the hack, you can upload it to the victim's device and run it disclaimers: This is only for testing purposes and can only be used where strict consent has been given. Do no...

ConcoLLMic

ConcoLLMic: Agentic Concolic Execution Paper : IEEE S&P 2026 ConcoLLMic is the first language- and theory-agnostic concolic executor powered by LLM agents. Unlike traditional symbolic execution tools that require language-specific implementations and struggle with constraint solving, ConcoLLMic:...

smod

smod smod is a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol. It is a full Modbus protocol implementation using Python and Scapy. This software could be run on Linux/OSX under python 2.7.x. Summery SCADA Process Control...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

AMSI.fail

AMSI.fail Originally C Azure Function Later ported to JS with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process. The snippets are randomly selected from a small pool of techniques/variations before being obfuscated. Every snippet is...

CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1: Unauthenticated Privilege Escalation to Administrator | ---|--- Product| Events Manager WordPress plugin Affected versions| 7.1.0 – 7.4.0.x Fixed version| 7.4.1 Weakness| CWE-269: Improper Privilege Management Severity| CVSS 3.1: 9.8 Critical —...

DotDumper

DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. At Black Hat Asia 2023, DotDumperGUI and DotDumperNative were published, along with version 1.1-stable of DotDumper. These three tools are meant to be used together,...

CVE-2026-108811

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...

CVE-2026-108812

A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMSUser.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly...

CVE-2026-108813

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMSDownload.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...

CVE-2026-108814

A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMSBanner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this...

CVE-2026-108810

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

Vulnerability_PoC

The PoC/Exploit of some interesting vulnerabilities Author: Vulnerability Research Team of Numen Cyber Labs 1. TCP/IP RCE Vulnerability CVE-2022–34718 PoC Restoration and Analysis...

CVE-2026-108815 idcCMS member_deal.php cross site scripting

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-108815

A vulnerability exists in idcCMS 1.70 affecting an unknown function within the admin/member_deal.php file. This flaw allows for remote cross-site scripting (XSS) . The exploit has been disclosed to the public and may be used. Specific remediation steps or detailed root cause analysis are not prov...

EUVD-2026-97294

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

GitHound

GitHound Overview GitHound is a BloodHound OpenGraph collector for GitHub, designed to map your organization’s structure and permissions into a navigable attack‑path graph. It: Models Key GitHub Entities GHOrganization : Your GitHub org metadata GHUser : Individual user accounts in the org GHTeam...