Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. id: CVE-2023-29887 info: name: Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion author: ctflearner severity: high description: | A Local...

CVE-2026-108284

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected by a vulnerability that could allow an authenticated user with the Reader role to obtain sensitive information . This issue is categorized under CWE-200: Exposure of Sensitive Information to an Unauthorized ...

EUVD-2026-119694

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information...

EUVD-2026-119620

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information...

CVE-2026-103320

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected by an information disclosure vulnerability (CVE-2026-103320 ). This flaw allows an authenticated user with the Reader role to obtain sensitive information, classified under CWE-200 . The vulnerability has a ...

PT-2026-140027

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information...

CVE-2026-103320: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader…

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information...

PT-2026-140032

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

hardentools

Hardentools Hardentools is designed to disable a number of "features" exposed by Microsoft Windows 10 and 11 and some widely used applications Microsoft Office, LibreOffice and Adobe PDF Reader, for now. These features, commonly thought for enterprise customers, are generally useless to regular...

CVE-2010-1240

CVE-2010-1240 PDF Launch Action Research Tool Educational research tool demonstrating CVE-2010-1240 vulnerability in Adobe Reader through malicious PDF Launch Actions. ⚠️ Disclaimer This tool is created strictly for educational purposes and security research to demonstrate CVE-2010-1240...

dex2jar

dex2jar Project move toGitHub | Mirror| Wiki| Downloads| Issues ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Releases| Issues sf| https://sourceforge.net/p/dex2jar| old| old| old bb| https://bitbucket.org/pxb1988/dex2jar| old| old| old gc| https://code.google.com/p/dex2jar|...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

CVE-2026-115906

A flaw was found in the zip crate. An attacker can bypass cryptographic authentication and cause applications to accept modified data by supplying a crafted encrypted archive. Because the AES Advanced Encryption Standard reader fails to verify the authentication tag when an encrypted entry is emp...

CVE-2026-59268

Apache OpenOffice versions through 4.1.16 are affected by a heap out-of-bounds write vulnerability in the WW8 PLCF reader . An attacker could craft a malicious Microsoft Word document that, when opened, causes the program to crash or results in memory corruption . Users should upgrade to version ...

CVE-2026-59268 Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-121544

Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory. Attackers can upload a crafted books.db with a cover value containing ../ sequences, then request...

CVE-2026-121544 Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers

Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory. Attackers can upload a crafted books.db with a cover value containing ../ sequences, then request...