obfus.h

obfus.h obfus.h is a macro-only library for compile-time obfuscating C applications, designed specifically for the Tiny C tcc you can download it here - Tiny-C-Compiler/releases. It is tailored for Windows x86 and x64 platforms and supports almost all versions of the compiler. Very reliable armor...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol 서버 개요 pyghidra-mcp는 강력한 소프트웨어 리버스 엔지니어링SRE 제품군인 Ghidra의 모든 분석 기능을 지능형 에이전트와 LLM 기반 도구의 세계로 가져오는 명령줄 Model Context ProtocolMCP 서버입니다. Ghidra의 ProgramAPI와 FlatProgramAPI를 pyghidra와 jpype를 사용하여 Python으로 연결한 다음, 그 기능을 Model Context Protocol을 통해 노출합니다. MCP는...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP 원격 코드 실행 CVSS 10.0 치명적 | 블라인드 RCE | FlowiseAI Flowise = 2.2.7-patch.1 및 = 2.2.7-patch.1, ;return 1;"...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

결합 은닉 채널: CVE-2023-1206 + CVE-2024-49882 개요 이 프로젝트는 두 가지 Linux 커널 취약점을 이용한 은닉 통신 채널을 시연합니다: 구성 요소| CVE| 용도 ---|---|--- 동기화 채널| CVE-2023-1206| IPv6 해시 충돌 타이밍을 통한 클록 동기화 데이터 채널| CVE-2024-49882| 대형 페이지hugepage 누수를 통한 컨테이너 간 데이터 전송 ┌────────────────────────────────────────────────────────────────────...

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 소개 이 문서에서는 CrushFTP 서버 부분에 영향을 미치는 CVE-2025-2825 취약점에 대한 연구를 제시합니다. CrushFTP는 파일 전송 및 저장을 위한 상용 솔루션입니다FTP, SFTP, HTTP/S, S3 유사 인터페이스 등. 이 결함은 인증 우회authentication bypass로 분류되며, 원격 인증되지 않은 공격자가 관리자 권한을 획득할 수 있게 합니다. 성공적인 익스플로잇은 crushadmin 권한으로 액세스하여 파일 보기 및 수정, 계정 관리,...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

CVE-2020-15148-bypasses

CVE-2020-15148-bypasses CVE-2020-15148Yii2 역직렬화에 대한 몇 가지 우회 기법 poc1 이것은 2.0.37 버전에서 이용 가능하며, 2.0.38에서 수정되었습니다. 즉, 이것에 CVE-2020-15148이 할당되었고, 뒤의 세 개는 우회 기법입니다. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction; class Generator protected $formatters; public function...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

CVE-2022-22965

CVE-2022-22965 일명 "Spring4Shell" JDK 9+에서 Data Binding을 통한 Spring Framework RCE 취약점 이 저장소의 목표는 현재까지 공개된 취약점 관련 정보를 최대한 중앙화하고, 해당 경우에 어떤 조치를 취해야 하는지 파악할 수 있도록 하는 것입니다. 내 애플리케이션이 취약한가요? 충족해야 하는 조건AND은 다음과 같습니다. JDK 9+ Servlet 컨테이너로 Apache Tomcat 사용 WAR로 패키징된 애플리케이션 spring-webmvc 또는 spring-webflux 의...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

GeoServer jsonArrayContains CQL Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoTools FilterToSqlHelper.constructEquality writes the expected argument of the jsonArrayContains CQL function RAW into the SQL string while only escaping the JSON pointer. A single...

Eyou E-Mail <3.6 - Remote Code Execution

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/iploginset/diploginget.php via the getloginipconfigfile function. id: CVE-2014-1203 info: name: Eyou E-Mail 3.6 - Remote Code Execution author: pikpik...

SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion

SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. dot dot in the path parameter to /Catalog, aka SAP Security Note 2230978. id: CVE-2016-2389 info: name: SAP xMII...

Planyo Online Reservation System <= 3.0 - Arbitrary File Read

The Planyo Online Reservation System plugin for WordPress through 3.0 ships ulap.php, an AJAX proxy that is directly reachable without WordPress bootstrapping or authentication. The sendhttppost function validates the host of the supplied URL against an allowlist that includes localhost, but neve...

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

Podlove Podcast Publisher plugin for WordPress through 4.5.1 is vulnerable to arbitrary file uploads due to missing file type validation in the podlovehandlecachefiles function. The image cache derives the stored file extension from the path of the attacker supplied source URL, while the image...

WordPress EasyCart <2.0.6 - Information Disclosure

WordPress EasyCart plugin before 2.0.6 contains an information disclosure vulnerability. An attacker can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function. id: CVE-2014-4942 info: name: WordPress EasyCart 2.0.6 - Information Disclosur...

WordPress Plugin WP Content Source Control - Directory Traversal

A directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. id: CVE-2014-5368 inf...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

Purchase Order Management v1.0 - SQL Injection

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...