retoolkit

Reverse Engineer's Toolkit What? This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: Double-click the retoolkit icon in the Desktop...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

Sandboxie

Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard MCP Server Scorecard Command Line Interface Prerequisites Installation Authentication Basic...

octosuite

Terminal-based toolkit for GitHub data analysis. $ octosuite user torvalds from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation pip install octosuite Usage TUI Interactive Launch the interactive termina...

brave-browser

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

bleach

====== Bleach NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes. Bleach can also linkify text safely, applying filters th...

gh_release_test

GitHub.com Release Test Project This is a demo of the functionality higlighted in the following blog post: https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/ Please direct any questions to [email protected]...

Exploit for CVE-2026-116296

CVE-2026-116296 — Gitea Archived Repository Write-Protection B...

CVE-2026-116296

Gitea versions ≤ v28.2.0 are vulnerable to an authorization bypass where the mustNotBeArchived middleware failed to protect specific API routes for milestones, releases, and labels . This allowed users with write-collaborator access to modify or delete project metadata in archived repositories, w...

CVE-2026-116296 Gitea archived repository release, milestone and label modification

The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token, could replace or delete release assets while keeping their download...

CVE-2026-116296 Gitea archived repository release, milestone and label modification

The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token, could replace or delete release assets while keeping their download...

RUSTSEC-2026-0434 `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

SafeReleaseRepoActions::extractreleasearchive builds each output path from the raw archive entry name and writes to it with no traversal check, so a malicious release archive can create directories and write files outside the destination directory, a "zip-slip" / path traversal CWE-22 / CWE-23. I...

RUSTSEC-2026-0427 `sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

SafeReleaseRepoActions::extractreleasearchive builds each output path from the raw archive entry name and writes to it with no traversal check, so a malicious release archive can create directories and write files outside the destination directory, a "zip-slip" / path traversal CWE-22 / CWE-23. I...

Astra Linux – vulnerability in Firefox and Thunderbird

Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs exhibited signs of memory corruption; it is assumed that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been addressed in Firefox...

Astra Linux – vulnerability in Firefox and Thunderbird

Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs exhibited signs of memory corruption; it is assumed that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been addressed in Firefox 151, Firefox...

CVE-2026-110494

Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This expos...

EUVD-2026-103991

Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This expos...